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FOREWORD 


By Stephan A. Parker 
Staff Officer 
Transportation Research Board 


This report identifies 125 high-priority research needs of interest to state departments 
of transportation, FHWA, and others, and recommends 26 specific research topics in the 
areas of transportation security, emergency management, infrastructure protection, and 
transportation resilience. The report also provides environmental, economic, and cyber per- 
spectives on transportation resilience with actionable messages for senior agency leaders 
and local elected officials. 


Beginning shortly after the terrorist attacks of September 11, 2001, and the anthrax and 
sniper attacks that quickly followed, state departments of transportation (DOTs) initiated 
a variety of activities—including research—to address a changed threat environment that 
involves security, emergency management, infrastructure protection, and resilience. Resil- 
ience has many different dimensions and relates to activities ranging from planning through 
design and construction to operations and maintenance. 

Resilience also includes social, economic, and funding considerations, and depends on 
the participation of a diverse set of agencies and organizations. Major shifts in how transpor- 
tation agencies view resilience occurred following Hurricane Katrina, Superstorm Sandy, 
infectious disease outbreaks from pandemic flu and, most recently, COVID-19. State DOTs 
and other organizations, including AASHTO and TRB, have investigated how best to pre- 
pare for, prevent, mitigate, respond to, or recover from weather-related and human-caused 
disasters, emergencies, and security incidents. Significant institutional, organizational, and 
technical issues are emerging as the broader transportation community enters the evolving 
fields of resilience and security. 

In 2018, TRB sponsored the Transportation Resilience Innovations Summit and Exchange 
(RISE) held in Denver, Colorado. This national summit and peer exchange on transporta- 
tion resilience convened more than 450 practitioners and researchers, including the state 
DOT, to focus on implementing risk and resilience practices within daily and emergency 
management operations in their particular environments. 

Under NCHRP Project 20-59(54), “Transportation System Resilience: Research Roadmap 
and White Papers,’ Geographic Paradigm Computing, Inc., was asked to discover knowl- 
edge gaps related to resilience and to identify and prioritize critical research needs. A lit- 
erature review was conducted and three national workshops were held. Over the course 
of 3 years, the research team engaged with a diverse set of transportation policy makers, 
executives, professionals, and researchers, and more than 180 resilience research needs were 
identified. NCHRP Research Report 975 documents and prioritizes these research needs, 
providing a roadmap for deciding which research to fund and in what order. The report is 


accompanied by a Roadmap Ratings and Rankings Workbook (Appendix C). A presenta- 
tion summarizing the research is also available to download. 

This report joins other relevant NCHRP research products: NCHRP Research Report 970: 
Mainstreaming System Resilience Concepts into Transportation Agencies: A Guide, and NCHRP 
Research Report 976: Resilience Primer for Transportation Executives. 


ABBREVIATIONS 


AMRI1O0 [TRB] Committee on Critical Transportation Infrastructure Protection 
CEO chief executive officer 

CI/KR critical infrastructure and key resources 

COOP Continuity of operations; Continuity of Operations Plan 

CPS cyber-physical systems 

CTSSR Committee on Transportation Systems Security and Resilience 
DDOS distributed denial of service 

FANSP functions, assets, networks, systems, and people 

FEMA Federal Emergency Management Agency 

GMSL global mean sea level 

HEEP Highway Engineering Exchange Program 

ICS industrial control systems 

IoT Internet of Things 

IPCC U.N. Intergovernmental Panel on Climate Change 

mNGT Modified Nominal Group Technique 

NEPA National Environmental Policy Act of 1969 

NIBS National Institute of Building Sciences 

NIPP National Infrastructure Protection Plan 

NIST National Institute of Standards and Technology 

NOAA National Oceanic and Atmospheric Administration 

RISE Transportation Resilience Innovations Summit and Exchange 
SCOR [AASHTO] Standing Committee on Research 


SCOTSEM [AASHTO] Special Committee on Transportation Security and 
Emergency Management 

SSP Sector-Specific Plan 
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SUMMARY 


Transportation System Resilience: 
Research Roadmap and 
White Papers 


Although the need for a more effective set of short- and long-term transportation resil- 
ience strategies is increasingly obvious and urgent, many knowledge gaps and institutional 
barriers still exist. Finding creative ways to fill the gaps and overcome the barriers is a 
critical challenge for transportation leaders at the state and national levels. NCHRP Proj- 
ect 20-59(54), “Transportation System Resilience: Research Roadmap and White Papers,” 
had three objectives: 


1. Highlight significant knowledge gaps within AASHTO and state departments of trans- 
portation (DOTs), 

2. Recommend a 5-year research plan that addresses these gaps, and 

3. Provide brief discussion papers of critical resilience-related issues facing senior trans- 
portation leaders today. 


NCHRP Research Report 975: Transportation System Resilience: Research Roadmap and 
White Papers presents the results of the research in three parts: 


e Part 1 documents the research effort and summarizes the research team’s conclusions 
and recommendations; 

¢ Part 2 provides the content of three discussion papers that were generated as white papers 
during the research, presented to industry peers, and revised into their final form for use 
by transportation agencies; and 

¢ Part 3 presents a 5-year research plan that reflects critical resilience research needs (i.e., 
knowledge gaps) gleaned from a diverse set of transportation policy makers, executives, 
professionals, and researchers. 


Working over a 3-year period, the research team identified more than 180 resilience 
research ideas from a variety of sources that included three national workshops, literature 
reviews of recently completed resilience research, participation in multiple resilience- 
oriented meetings, and discussions with selected thought leaders from TRB, AASHTO, 
FHWA, National Institute of Standards and Technology (NIST), and others. These research 
needs were then synthesized into 46 candidate projects and subsequently rated and ranked by 
an equally diverse set of participants. This effort yielded 26 recommended projects grouped 
in 10 topical subject areas (e.g., emergency management, asset management, design for 
resilience) with six change-management thrusts (e.g., policy and process, technology, insti- 
tutional focus, community engagement). The resulting roadmap is a portfolio of 26 recom- 
mended projects and represents a potential research investment ranging from $10,750,000 
to $16,750,000. 


The roadmap is not intended as a diktat for research investment. Rather, it aims to be an 
enabling tool meant to shape the ongoing research efforts and as input for FHWA, AASHTO, 
TRB, individual state DOTs, and others to plot a forward course as they move ahead with 
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their respective resilience-related initiatives. This roadmap presents a mechanism by which 
the transportation community can work towards a consensus concerning those invest- 
ments that will significantly advance the understanding, policy, and practice of transporta- 
tion resilience. 


The discussion papers presented in Part 2 of this report bear additional comment. The 
panel for NCHRP Project 20-59, “Surface Transportation Security and Resilience Research,” 
also directed the research team to prepare three papers to promote discussion among trans- 
portation policy makers and executives. The three papers—Understanding Transportation 
Resilience: An Environmental Perspective, Understanding Transportation Resilience: An 
Economic Perspective, and Understanding Transportation Resilience: A Cyber Perspective— 
were developed and presented at various industry meetings during the course of the research. 
As finalized for this report, the papers reflect revisions based on the feedback received at 
those meetings and the panel’s instruction to create discussion papers that agency leaders can 
use as tools to engage both peers and elected or appointed officials who may be unfamiliar 
with the conversation surrounding transportation resilience. 


Each discussion paper addresses three crucial questions that often are posed by senior 
leaders: 


1. What is the issue at hand defined in concrete terms that I understand? 
2. Why is this issue critical or important to my agency and me? 
3. What do you want me to do about it? 


Not surprisingly, several common themes emerged in the drafting of these papers. The 
following discussion points were derived from common barriers that organizations identi- 
fied as being frequently encountered as they attempt to develop and introduce more formal 
resilience management approaches. Given the purpose of the discussion papers, the discus- 
sion points have been framed as a series of direct questions that are designed to stimulate 
conversation, self-assessment, and concrete action-taking. The questions listed are neither 
exhaustive nor representative of all agencies, and agencies are encouraged to modify them 
to suit local priorities and circumstances. 


e How have the impacts of environmental change affected your state’s transportation mis- 
sion in the past? What environmental impacts do you project affecting your full set of 
modal assets, networks, and systems over the next 5 years, 10 years, and 50 years? Have 
you considered beneficial aspects as well as harmful ones? Do you know the current and 
projected flooding risk and subsequent loss of value for your system? Do you know how 
this risk affects individual assets (e.g., bridges), communities, corridors, and regional, 
statewide, or multistate areas? 

e Do youknow the current and projected cyber risks to your agency and the consequences 
of the loss of products and services for your system and its users? Do you know how these 
risks impact travel, safety, environmental quality, and economic activity at community, 
regional, statewide, or multistate levels? 

e Do youhave policies and plans in place that address these impacts from maintenance and 
system operations, program delivery, and long-range planning perspectives? 

e Have you implemented formal asset management, performance management, and risk 
management approaches in your agency? Are these functions coordinated with each 
other? Are they coordinated with your traditional long-range planning, program delivery, 
and operations functions? Have you integrated resilience requirements in these manage- 
ment systems? 


Do you have a strategy for overcoming the polarization and politicization of conten- 
tious resilience topics such as climate change, sustainability, environmental justice, and 
the like? 

Do you have a plan for integrating resilience into your agency’s culture, mission, cus- 
tomer service objectives, business planning priorities, asset performance measures, and 
other measurable priorities? 

Environmental and other disasters take a human toll on employees. Are you prepared 
for post-disaster employee trauma, burnout, absenteeism, turnover, location stress, and 
other effects? 

How will you resolve the conflict between your resilience objectives, policies, procedures, 
and priorities and those of other agencies or communities? How will you resolve the 
conflicts between your resilience decisions and other agency imperatives and priorities? 
Do you participate in community and statewide planning initiatives reflecting integrated 
incident response, disaster recovery, continuity of government, and continuity of opera- 
tions, including mitigation priorities? Does this participation foster transparent com- 
munication, collaborative and cooperative partnerships between elected officials, your 
agency’s leadership, key technology providers, and others? Do you know who you can 
rely on in a crisis? Do you know who relies on you? 

Are you aware of and in support of FHWA, AASHTO, TRB, and NIST resilience initia- 
tives? Are you investing in resilience-focused education and training for your executive 
staff, your employees, and your business partners? 

What will it take for you to personally own this issue? 
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PART 1 


Research Overview 


Background 


Transportation agencies working across all modes continue to grapple with the dawning real- 
ization that they cannot plan, build, or operate their respective infrastructures to achieve and 
maintain the degree of reliable and resilient service expected by society and its elected represen- 
tatives using the approaches, technologies, and mindsets of the past. 


TRB’s Critical Issues in Transportation 2019 report tacitly recognized this assertion and con- 
cluded the following (TRB Executive Committee 2018): 


[R]ecent intense floods, superstorms, and hurricanes have disrupted the lives of millions and caused 


billions of dollars worth of damage. Combined with the vulnerability of transportation facilities to 
terrorism, these events have made public and private officials acutely aware of the need to identify com- 
munity vulnerabilities and plan for responses to natural and human-caused disasters, including near- and 
long-term climate change effects on sea-level rise, droughts, forest fires, and heatwaves. 


The report also posed 14 critical questions that outline the dimensions of these vulnerabilities 
(TRB Executive Committee 2018): 


1. 


How can strategies appropriate for each mode be developed to apply layers of security without exces- 
sively impeding the movements of passengers and goods? 

What kinds of decision-making tools can best help transportation agencies make appropriate deci- 
sions regarding climate change and terrorism in a risk management framework? 

How can risk management approaches be incorporated into transportation planning and decision 
making? 


. How can results from climate models be translated into changes in design standards for severe 


weather events? 


. Which policies, programs, research topics, and investments can and should be undertaken to adapt 


existing transportation facilities and systems to rising sea levels, stronger storm surges, more fre- 
quent flooding, and other powerful and damaging extremes of weather? 


. How can experiences of communities and states that are beginning to adapt and change be best 


evaluated and shared? 


. In light of the inability to be precise about the scale and timing of future impacts, how can funding 


policies, designs, and standards be modified to build in flexibility to allow for needed adaptation, 
including the rebuilding of more resilient infrastructure after infrastructure is damaged or destroyed? 


. What evidence would convince policy makers and the public of the need to incur the extra, near-term 


costs of adaptive management? 


. What are feasible strategies for defending or retreating from the high-risk areas and avoiding continued 


investment in the most vulnerable ones? 


. How can security forces most effectively mitigate the security risk from drones? 
. What capabilities will public agencies need to verify whether cybersecurity is being managed effectively? 
. What are the best practices, how can they be shared, and what role should the public sector play in 


overseeing and enhancing cybersecurity? 


. How can these vulnerabilities be overcome or managed effectively? 
. What strategies are needed for better preparation, response, communication, and sheltering-in-place 


on a regional basis? 
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Implicit in these questions were two assumptions: (1) The industry lacks certain knowledge 
necessary to improve the security, reliability, and resilience of transportation across all modes, 
and (2) Key decision makers lack the local knowledge and context to improve individual agency 
approaches to security and resilience. 


The objectives of NCHRP Project 20-59(54), “Transportation System Resilience: Research 
Roadmap and White Papers,” addressed both issues. The research strategy would be designed 
to fill high-priority knowledge and practice gaps in the industry, and the project would provide 
a set of background materials designed to introduce individual policy makers to certain aspects 
of this challenge. 


In 2016, with support from NCHRP Project 20-59(51)C, “Research Support for Imple- 
menting Security, Emergency Management, and Infrastructure Protection at State Transpor- 
tation Agencies,” the AASHTO Special Committee on Transportation Security and Emergency 
Management (SCOTSEM) determined a more strategic approach to its NCHRP research 
project endorsements. That strategy, documented in the 2017 AASHTO report Understanding 
Transportation Resilience: A 2016-2018 Roadmap for Security, Emergency Management, and 
Infrastructure Protection in Transportation Resilience (Fletcher and Ekern 2017), brought a 
focused set of recommendations to transportation security, infrastructure protection, emer- 
gency management, and transportation resilience research. Two recommended actions in that 
report—(1) Develop a follow-on research roadmap for the period 2020-2025, and (2) Provide 
high-level discussion papers on certain aspects of transportation resilience—were subsequently 
combined into NCHRP Project 20-59(54). 


NCHRP Research Report 975 documents the approach, findings, and recommendations of 
NCHRP Project 20-59(54) and summarizes major points contained in the three white papers 
that were first developed and presented as part of the research, then refined into discussion 
papers at the direction of the project panel. The three papers are: 


e Understanding Transportation Resilience: An Environmental Perspective, 
e Understanding Transportation Resilience: An Economic Perspective, and 
e Understanding Transportation Resilience: A Cyber Perspective. 


Each 12-15 page paper was prepared for transportation policy makers and executives to pro- 
vide a mechanism by which they can engage their peers, together with elected and appointed 
officials, who may be unfamiliar with the conversation surrounding transportation resilience. 
The papers were prepared at the direction of the NCHRP Surface Transportation Security and 
Resilience Panel (Panel 20-59), which had selected the three specific transportation resilience 
topics for more in-depth treatment. 


Although the papers reflect a uniform style and tone, each was developed separately with no 
attempt to harmonize or synthesize their findings. NCHRP Research Report 975 thus presents 
an integrated overview of the 2016-2018 roadmap report together with the three discussion 
papers, and in Part 3 introduces the new 2020-2025 Transportation System Resilience Research 
Roadmap. 


Research Approach 


The research team undertook this work over 34 months on two major concurrent tracks. 
‘The objective of the first track was to develop a 5-year research roadmap intended for use by 
researchers, research funding sponsors, and agency implementers. The objective of the second 
track focused on preparing three white papers (discussion papers) dealing with environmental, 
economic, and cyber aspects of transportation resilience. 


The research team consciously conducted all project activities openly and transparently, 
involving and acknowledging the diverse interests of research consumers, which included those 
agencies implementing NCHRP research results, research sponsors, and the research commu- 
nity. The research team acted as facilitators and documenters of this consensus-oriented process. 


The first task involved identifying and prioritizing research needs (i.e., topics in transpor- 
tation security, infrastructure protection, emergency management, and transportation resil- 
ience for which there was a [perceived] lack of transportation sector knowledge). This task was 
accomplished in two phases. The first phase was completed before the October 2018 Transpor- 
tation Resilience Innovation Summit and Exchange (RISE) conference, and the second phase 
was completed after the RISE meeting. 


The needs identification task began with a literature search of pertinent suggestions for 
follow-on research documented in the “additional research” sections of the final reports of 
NCHRP projects spanning the period 2008 to 2018. 


To gather input from the broader transportation and research community, pre- and post- 
RISE research needs forms were designed and distributed in hardcopy, by email, and through 
an online survey mechanism. 


Supplementing the needs submission process, the research team also gave multiple briefings 
at AASHTO and TRB meetings throughout 2017 and 2018 and conducted two research needs 
workshops—one at the 96th TRB Annual Meeting in 2017 and one at the 97th TRB Annual 
Meeting in 2018. During these workshops, the research team collected and compiled needs 
expressed by the attendees. The research team also participated in the 2018 RISE meeting, pre- 
senting briefings on the project and soliciting additional needs. 


In total, more than 180 specific needs were identified from nine source categories. This set of 
needs was then community-rated and ranked to determine the top 125 high-interest research 
needs in 10 subject matter areas (e.g., emergency management, cybersecurity, community resil- 
ience, asset management). 


These top-rated needs were synthesized into 46 candidate project concepts. The 46 candidate 
concepts were again community-rated and ranked, yielding 26 high-priority recommendations 
for the roadmap for the funding period 2020-2025 (see Part 3). 
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Organizing the recommendations based on a 5-year strategy reflected a broad-based con- 
sensus to address knowledge gaps that were perceived as high-priority and that meeting par- 
ticipants considered necessary to improve the resilience of the agency, the transportation 
system, and the community. 


In creating the discussion papers, the research team was tasked to prepare executive-level 
white papers on special topics related to transportation resilience. The three papers were: 


1. Understanding Transportation Resilience: An Environmental Perspective, focusing on sea-level 
rise and extreme weather (i.e., climate change) issues; 

2. Understanding Transportation Resilience: An Economic Perspective, focusing on the economics 
of resilience and the economic function of resilience; and 

3. Understanding Transportation Resilience: A Cyber Perspective, focusing on cyber systems 
resilience. 


Although the papers reflected the editorial perspective of the co-authors, each paper incor- 
porated topical input from U.S. DOT-, FHWA-, and DHS-published materials; industry subject 
matter experts; and the project team’s literature review. 


All three papers were—and are—intended for executive-level transportation professionals, 
but by extension the papers were designed to provide transportation agencies a mechanism 
to engage elected and appointed officials who might be new to or unfamiliar with issues sur- 
rounding resilience. This audience and purpose dictated that the treatment of each topic be 
both broad and succinct. The three papers were discussed together at the project’s Interim 
Panel Meeting on September 24, 2017, and at the 2017 AASHTO Resiliency Peer Exchange 
on Extreme Weather and Climate Impacts on November 6-7, 2017. The roadmap was briefed 
at the 2017 RISE meeting. All three papers complemented and informed the discussion and 
debate at the 2018 RISE meeting. 


The research team had previously produced CEO-focused material that suggested that C-level 
(chief) executives are primarily interested in three critical questions: 


1. What is the topic defined in concrete terms that I understand? 
2. Why is this issue critical or important to my agency and me? 
3. What do you want me to do about it? 


Guided by this insight, the research team then developed short (12-15 page) discussion 
papers. The discussion papers employed a construct adapted from the 2006 National Infra- 
structure Protection Plan (NIPP) Risk Management Framework which called on each sector 
to identify those functions, assets, networks, systems, and people (FANSP) that make up the 
nation’s critical infrastructure and key resources (CI/KR) (see Table 1-1). The FANSP frame- 
work was further elaborated on in the May 2007 Transportation Systems: Critical Infrastruc- 
ture and Key Resources Sector-Specific Plan as Input to the National Infrastructure Protection 
Plan, hereafter called the CI/KR SSP for NIPP (DHS 2007). 


Each discussion paper was designed to explore interdependencies associated with the func- 
tions, assets, networks, systems, and people at a state DOT that are impacted by actions or 
inactions taken to build resiliency around that particular subject area. 


The discussion papers also addressed the following questions of interest to transportation 
agency leaders: 


e What cana state DOT do nowor worry about when it comes to creating resiliency against 
extreme weather and/or sea-level rise, and how does that DOT harness and augment its 
functions, assets, networks, systems, and people to sustain operations through changes in the 
weather? 


Table 1-1. FANSP framework. 
The assignments, tasks, and positions in a state DOT that are critical to the 
FUNCTIONS performance of continued transportation service through any hazard or 
disruption 
The infrastructure, equipment, resources, tools, vehicles, hardware, roadways, 
ASSETS tunnels, and facilities owned and operated by a state DOT to ensure the 
continued safe transport of goods and people through any hazard or disruption 


The relationships maintained by a state DOT with local municipalities, 
NETWORKS contractors, the private sector, and other branches of local, state, and federal 
government to ensure continuity of transportation operations through any 


hazard or disruption 


The variety of critical technology platforms and applications, including all 
software utilities and electronic forms of data, utilized by state DOT personnel 
to operate assets and infrastructure, support functional continuity, and enable 
network communication and reliability through any hazard or disruption 


PEOPLE The inherently necessary human resources and personnel needed by a state DOT 
to ensure transportation service is provided through any hazard or disruption 


SYSTEMS 


e What can a state DOT do now or worry about when it comes to a resilient economy in which 
a state DOT not only contributes to but also benefits from a vibrant commerce environment? 
What are the functions, assets, networks, and systems that are enhanced through this resiliency? 

e What can a state DOT do now or worry about when it comes to resilient cyber systems with 
respect to critical functions, assets, networks, systems, and people? 


Given the dynamic nature of the research topics, the expectations of the panel that the greatest 
number of viewpoints be represented in the work products, and the desire of the panel to contin- 
uously socialize the research, the research team developed and executed an engagement strategy 
encompassing attendance and participation in various events to gather information, present 
research findings, engage with industry leaders, and accomplish other activities necessary to 
support the project (Table 1-2). 


Each engagement had multiple objectives in support of multiple project tasks. In general, 
the earlier engagements focused on information gathering, building awareness, motivating 
interest, and improving knowledge about resilience, the NIPP, the research roadmap, and other 
associated topics. A significant emphasis of the 2017 activities was on identifying and engaging 
with senior leaders from transportation agencies and other thought leaders in the industry. 


Engagements in 2018 leading up to the RISE meeting focused more on communicating 
the results of the research to this audience to build interest, involvement, and willingness to 
invest in the recommendations of the research roadmap. Engagement activities held during 
the second stage of the project also were used to support the development and refinement of the 
research roadmap. 


Research Approach 
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Table 1-2. NCHRP Project 20-59(54) engagement schedule. 


* ABR10 = TRB’s Committee on Critical Transportation Infrastructure Protection (now AMR10). 
*“* CTSSR = AASHTO's Committee on Transportation Systems Security and Resilience. 


No. Engagement Date City — 
2017 
i, TRB Annual Meeting January 2017 Washington, DC 
2. ABR10 Mid-Year Meeting* June 2017 Washington, DC 
3. SCOTSEM Annual Meeting August 2017 Houston, TX 4 
4. 20-59(54) Interim Panel Meeting October 2017 Phoenix, AZ 
5. AASHTO Resiliency Peer Exchange November 2017 _ aaa DC 
2018 
6. TRB Annual Meeting January 2018 | Washington, DC 
7. CTSSR Steering Committee Meeting** May 2018 Franklin, TN 
8. ABR10 Mid-Year Meeting June 2018 Washington, DC 
9. CTSSR Annual Meeting [uty 2018 San Diego, CA 
| 10. Transportation RISE Conference October 2018 Denver, CO 
11, Project 20-59(54) Interim Panel October 2018 Denver, CO =| 
Meeting 
2019 
12. TRB Annual Meeting January 2019 Washington, DC 
13. ABR10 Mid-Year Meeting June 2019 Washington, DC 
14. CTSSR Annual Meeting August 2019 Jackson, WY 


Project Findings 


The findings of the research project reflect the research team’s attempt to both compile the 
suggested research needs into a list of topics and to rank them by priority based on input from 
the transportation community. Table 1-3 presents the community rating and ranking values 
of the 26 roadmap projects recommended for the period 2020-2025. The roadmap (Part 3 of 
this report) provides additional information about each project, including project descriptions, 
objectives, and estimated costs. Table 1-4 illustrates the breadth of concepts that the trans- 
portation community currently includes under the umbrella term, resilience, and includes the 
project number prefix codes. 


When requesting suggested research topics and when asking members of the transporta- 
tion community to rate topics, the research team endeavored to consolidate the information 
so it could be presented and rated as consistently as possible. Guiding this effort the research 
question was, “Why did respondents rate projects the way they did?” Analyzing this question 
yielded many interpretations of candidate ratings, which can be interpreted as a reflection of the 
evolving nature of resilience. DOTs are still wrestling with the fundamental nature of resilience 
and how to accommodate it within their organizations. On the one hand, clear evidence exists 
that AASHTO and TRB no longer equate resilience narrowly with emergency management 
activities or extreme weather operations. On the other hand, Table 1-4 illustrates the breadth 
of concepts that the transportation community currently includes under the umbrella term of 
resilience. 


A balanced research, development, and deployment program contains a mixture of distinct 
overlapping and interacting thrusts or emphasis areas, as illustrated in Table 1-5. Project oppor- 
tunities dealing with changes to workflow, workforce, and community engagement have been 
well represented among the top-ranked candidates, while more basic research and deployment 
projects (i.e., the programmatic “tails”) are less represented. This distribution appears to reflect 
the industry’s desire to incorporate resilience into existing lines of business as opposed to envi- 
sioning a new mission with new structures as was done a generation ago with transportation 
security. 


Resilience has been defined as “the ability to prepare and plan for, absorb, recover from, or 
more successfully adapt to adverse events” (Fletcher and Ekern, 2017). Given that the evolving 
sense of the phrase “adverse events” is understood to include “disruptive forces,” a set of long- 
term influences on transportation requires thoughtful attention. Although the specific list of 
adverse events may vary from state to state, disruptive forces are already creating ripples adverse 
to the long-term status quo once enjoyed by the industry (Table 1-6). 


Disruptions caused by these forces are already being felt by the transportation industry, and 
these effects are only starting to manifest themselves. Each of these disruptions will require a 
great deal of preparation, planning, and adapting by AASHTO and its member states. 
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Table 1-3. Top-ranked resilience research projects. 


No. | Item * Title | Rating Rank ** 
1. | DR-O5 Integrating Resilience into Transportation Project Development 3.91 al 
2. | ER-02 sian wesc Making Investments in Resilient 3.75 3 
3. | DR-O4 | Design Guidance and Standards for Resilience 3.72 3 
4. | AM-01 | Assessing and Managing the Vulnerability of Transportation Assets 321 4 
5. | AM-03 | Incorporating Resilience in National Programs 3.68 5 
6. | EM-05 | Streamlining the Damage Assessment Process 3.53 6 
7. | AM-02_ | Funding and Financing Resilience Adaptation 3.48 7 
8. | DR-O1 a ida Hydrological Forecasting to Improve Transportation 3.44 8 
9. | PM-O1 | Resilience Performance Measures: A Quantitative Approach 3.36 9 

10. | CR-O2 | Cyber Risk Transfer Strategies 3.30 10 

11. | 11-02 leo erhaaas Infrastructure Interdependencies Risk Analysis and 3.24 11 

| 12. CO-02 | Resiliency Knowledge Base 3.21 12 

13. | EM-07 | Effective Practices in Extreme Weather Response 3.18 13 

14. | II-O1 Maintaining Resilience in a Multi-modal Transportation System 3.16 14 

15. | HF-O1 | Building a Resilient Work Force in State DOTs 3,15 15 

16. | AM-04 | Assessing Resilience Frameworks 3.09 16 

17. | PM-03_ | Frameworks for Measuring Transportation Resilience 3.06 17 

18. | CO-O5 | Organizational Resiliency: Moving from Recovery to Retrenchment 3.06 17 

19. | cR-04 ee of GPS-based Applications in 3.03 19 

20. | EM-O2 | New Technologies for Comprehensive Debris Management 3.03 19 

21. | EM-10 | Emergency Project Contracting Guidelines 3.03 19 

22. | CR-O5 Deploying the NIST Cybersecurity Framework in State DOTs 3.03 19 

23. | EM-03 | Multi-Agency Emergency Preparedness 3.03 19 

24. | RM-O1 orig Tool Assessing the Value of Resiliency Alternatives by State 3.03 19 

25. | EM-08 | Emergency Management Training for Transportation Workers 3.00 25 

26. | CO-03 Restoring Access: Post-disaster Transportation Equity 3.00 25 


* Table |-4 explains the prefix codes that were assigned when identifying individual items. 
** Ranks listed reflect ties. 


Table 1-4. Top-ranked candidate projects, 
by subject. 


Subject Percentage 


Emergency Management 


23% 


Asset Management 


15% 


Design for Resilience 


12% 


Community Resilience 


12% 


Cyber Resilience 


12% 


Infrastructure Interdependencies 


8% 


Performance Measures 


8% 


Economics of Resilience 


4% 


Human and Social Factors 


4% 


Pi PIT RPININ]IW]WlWIhI]D 


Risk Management 


4% 


N 
a 


Total 


Table 1-5. Top-ranked candidate projects, 
by topic. 


100% 


| Topic Count 


| Policy, Rules, Process, and Funding 


| Tools and Technical Systems 


Institutional Focus 


Community Engagement 


Investing in Innovation 


Widespread Deployment 


Total 


Table 1-6. Top-ranked candidate projects addressing disruptive forces. 


Disruptive Force 


Percentage 


Anthropocene (climate change, sea-level rise, extreme weather) 


67% 


Megacities/Smart Cities 


17% 


Disruptive Technology (e.g., loT, Al, and 5G broadband) 


11% 


Knowledge, Trust, Resource, and Resilience Inequities 


6% 


Post-Carbon Society 


0% 


Post-Ownership or Sharing Society 


0% 


Total 


loT = The Internet of Things; Al = artificial intelligence; 5G = fifth generation. 
* Total percentage reflects rounding. 


100%* 


Project Findings 
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A quick perusal of the top-ranked candidate projects in Table 1-5 highlights that—except for 


extreme weather events—many potentially disruptive forces threaten transportation services 
but are not yet seen as research topics of interest, possibly because they have not yet been tied to 
the idea of resilience within the DOTs. 


‘The following observations are offered to assist in the interpretation of the polling and selec- 


tion processes conducted in this research: 


1. 


Participants in the identification of the needs, needs ranking, candidate project develop- 
ment, and projects ranking processes made up a representative sample of research sponsors, 
research users, and researchers. 


. Needs ratings and candidate projects ratings appeared to be unbiased and within expected 


distributions. The researchers did not detect any attempt to skew the results in favor of some 
predetermined outcome. 


. Top-ranked candidate projects encompassed a variety of DOT program areas. As such, these 


candidate projects could be used by several AASHTO committees for possible problem state- 
ment development, endorsement, and submission. 


. Top-ranked candidate projects addressed multiple aspects of the program management 


process. 


. Each top-ranked candidate project was assumed to incrementally advance resilience practices 


within DOTs and contribute to the overall resiliency of the transportation system; however, 
the researchers were unable to discover any strategic or synergistic effects of the list taken as 
a whole. 


. Similarly, because the objectives of each candidate project appeared to be independent of each 


other, there were no apparent relationships among the projects (i.e., precedence, concurrency). 


. Several top-ranked candidate projects appeared to be more suited to synthesis projects. 
. Implementation products and activities could be incorporated into specific statements of 


work, but only one of the top-ranked candidate projects had an implementation focus 
(EM-08 Emergency Management Training for Transportation Workers). 


. The final list of 26 recommended projects represents a potential program investment ranging 


from $10,750,000 to $16,750,000. 


Highlights of the essential points from each of the three discussion papers are reproduced for 


convenience in Table 1-7. 
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Conclusions and Recommendations 


During the prosecution of the research, the research team arrived at the following 10 conclu- 


sions regarding transportation resilience that augment the discussion. 


1. 


The global transportation system is fundamentally resilient and reliable. Since the 1980s, 
innovative business practices such as just-in-time manufacturing, just-in-time retailing, 
and e-commerce (i.e., online retail) have revolutionized the global economy. Each of these 
innovations depends on reliable and resilient supply chains that rely on the existing global 
transportation infrastructure. 

It is not possible to engineer one’s way to resilience. Although many transportation resil- 
ience strategies are designed to defend against disruption of service or adapt the infrastruc- 
ture to environmental changes, events will always occur that exceed the system's design. 
For example, Hurricane Harvey (August 17-September 2, 2017) was determined to be a 
250,000-year storm. No feasible stormwater management system could have prepared for 
that situation. Likewise, sustained winds from Hurricane Irma (August 30-September 17, 
2017) were estimated to be more than 185 mph when the storm hit the island of Barbuda. No 
building code on earth requires structures to withstand sustained winds of this strength. 
Adverse weather conditions are not the most serious environmental threats to transporta- 
tion. Although winter storms, high winds, icing, fog, heatwaves, and other weather condi- 
tions can disrupt travel, flooding is by far the most frequent and expensive environmental 
hazard to the infrastructure. According to an article published by the Pew Charitable Trusts 
(Lightbody 2017), 


[flooding is the costliest and most common natural disaster in the U.S., claiming lives, inflicting 
financial losses on households and businesses, and straining the government agencies that provide 
flood response and relief. From 1980 to 2013, flooding cost Americans more than $260 billion in 
damage; from 2006 to 2015, federal flood insurance claims averaged $1.9 billion annually. The pattern 
continued in 2016, with the federal government declaring 36 disasters involving floods or hurricanes. 


However, the most serious environmental long-range threat is sea-level rise. Almost the 
entire U.S. coastline will be affected to some degree, experiencing elevated water levels in the 
range of 1-8 feet depending on location, resulting in more frequent tidal flooding, greater 
storm surges, and more damaging wave action. 

“All-hazards” risk mitigation does not result in “all-purpose” resilience. Overlaps between 
risk management practices and resilience management exist, and the two approaches are 
complementary, but they are not identical. Risk management is focused on reducing the 
likelihood or consequences of specific hazards whereas resilience management is geared 
towards minimizing disruptions to or restoring the loss of service due to adverse or changing 
conditions. 

DOTs have made significant investments in transportation resilience. Although efforts 
have not specifically been labeled as such, over the past 15 years, DOTs and their partner 
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10. 


organizations have made a great deal of progress in improving the resilience of the system. 
Scalable, adaptive approaches to emergency operations and incident management are now 
operationalized in every state. New threats (e.g., sea-level rise) are recognized by those 
affected, and adaptation strategies are evolving. However, the severity, duration, and extent of 
disruptive events all are increasing and challenging the abilities of communities to respond. 
The entire system does not need to be resilient to every potential adversity. If this condi- 
tion were even possible, the nation couldn't afford the investment. Transportation resilience 
doesn’t occur in a vacuum. Different communities face different threats and have differing 
degrees of risk tolerance, differing priorities, and differing access to prevention and recovery 
resources. What works well in Norfolk, Virginia, may not translate to the Shenandoah Valley. 
As a general rule, however, the greatest threat to transportation infrastructure is flooding. 
Depending on location, flooding may be a consequence of storm surge, excessive rainfall, 
king tides, or dam or levee failure. 

The DOT is not the lead resilience agency in the community. The old first responder adage, 
“no roads, no codes” is undeniably true, and maintaining or restoring transportation lifelines 
is a crucial component of disaster response and recovery; nonetheless, access and connec- 
tivity priorities are best established cooperatively with other critical infrastructure users 
(e.g., law enforcement, health care providers, utilities). In most cases, the DOT will not be 
the lead agency responsible for overall rescue and recovery operations. 

Transportation resilience is not the most important investment a community or state can 
make. There is a high level of dependence by other lifeline utilities on the transportation net- 
works and vice versa. An interruption of the road network may well result in the consequen- 
tial loss of another service. Conversely, disruptions to other infrastructures, particularly the 
fuel supply, electric power, and communications infrastructures, may render the transpor- 
tation network ineffective or unavailable. Communities and states need to determine local 
investment priorities for all infrastructures, taking local interdependencies into account. 
Resilience is not just emergency operations “on steroids.” Although the most visible evidence 
of transportation resilience is most often seen during severe weather operations, resilience 
management encompasses an integrated suite of management and technical approaches 
dealing with defending, adapting, or even abandoning critical infrastructure. These activities 
are seamlessly woven into an agency’s asset management practice. 

Extreme weather resilience is not just the new, politically correct term for climate change. 
This assertion results from confusing cause-and-effect relationships. Global warming results 
from injecting industrial gases (primarily CO, and methane) into the atmosphere (i.e., the 
greenhouse effect). One of the predicted effects of global warming is climate change, or long- 
term changes to weather patterns. Among these weather-related changes is an increase in 
the frequency and severity of extreme weather events. In other words, climate change is the 
cause and extreme weather is one of the effects. Mature resilience practices aim to reduce 
both cause and effect dimensions. 


A primary justification for taking a collaborative, cooperative approach to this project was to 


build a constituency for its findings. It was thought that this approach would, in turn, encourage 
multiple entities to adopt, adapt, and operationalize the recommendations contained in the 
roadmap. The roadmap can be used in several possible ways: 


1. 


The recommended 2020-2025 slate of projects will give the readers core project material 
that can be used to prepare Research Problem Statement submissions to the annual NCHRP 
process. 

Readers interested in gaining a deeper understanding of topics of interest to FHWA, TRB, or the 
state DOTs from a market analysis perspective may want to concentrate on the detailed analysis 
contained in the downloadable Roadmap Ratings and Rankings Workbook (Appendix C). 
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These ideas could become themes for upcoming AASHTO, TRB, or FHWA meetings, sessions, 
panels, workshops, webinars, calls for papers, and other efforts. 

. Agency executives and high-level managers can use the material contained in the discussion 
papers for multiple purposes in their respective agencies, including raising awareness, risk 
and resilience self-assessments, developing educational material for partners such as elected 
officials, peer agencies, private-sector providers, and so forth. 

. Ultimately, the roadmap could provide the foundation for a living document, acting as an 
investment framework for a national research program in transportation resilience jointly 
defined by FHWA, AASHTO, and its member DOTs, maintained by a joint committee of 
stakeholders. 


PART 2 


White Papers: Understanding 
Transportation Resilience 
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Initially presented at industry meetings during the research for this project, the three papers 
that make up Part 2 of this report were further developed to function as discussion tools for use by 
transportation agency executives and policy makers engaging with peers and elected or appointed 
officials. The three papers address topics that were selected by the NCHRP 20-59(54) project panel 
from a list of 11 resilience-related issues: (1) cybersystems resilience, (2) economics, (3) sea-level 
rise/extreme weather, (4) earthquakes, (5) chokepoints/single points of failure, (6) human factors/ 
continuity of operations (COOP), (7) information for decisions, (8) automated/connected vehicles, 
(9) workforce development, (10) drought/heat, and (11) community. References for the papers 
appear under “Part 2” in the report’s “References” section. 


The questions presented in the discussion papers are neither exhaustive nor representative 
of all agencies. It is expected that agencies will modify them to suit local priorities and circum- 
stances. Similarly, the contents of the discussion papers do not, of themselves, constitute how-to 
guides or a roadmap for change. Rather, each paper is meant to help shape the topics and plot 
a short-term forward course. The papers do not provide a lengthy presentation of what resil- 
ience is or how it is defined, as this topic has already been covered in AASHTO’s Understanding 
Transportation Resilience: A 2016-2018 Roadmap for Security, Emergency Management, and 
Infrastructure Protection in Transportation Resilience (Fletcher and Ekern 2017). Readers are 
encouraged to review all three sections in Part 2 in conjunction with the 2017 AASHTO report 
and the contractor’s final report that provided the basis for the AASHTO publication (see Refer- 
ences). Key contents of the three sections are: 


Understanding Transportation 40 The Main Thing: A Matter of 
Resilience: An Environmental Priorities 
Perspective 42 An Economics Perspective of 


Transportation Resilience 
46 Building Resilient Asset Management 
47 The Business Case for Resilience 
47 —_ Engaging Economic Resilience 


25 Essential Points 

26 Introduction 

28 Weird Weather: The New Normal 
32 Weather Trends Summary for 


Transportation Policy Makers Understanding Transportation 
33. ‘The Importance of Environmental Resilience: A Cyber Perspective 
Resilience 
33 A Resilience Management Approach 49 — Essential Points 
to Environmental Hazards 50 What Is Past Is Prologue 
35 Understanding Regional Differences 51 Critical Cyber Trends for 
37. Environmental Resilience Summary Transportation Policy Makers 
for Transportation Policy Makers 55 Cybersecurity or Cyber 
38 Engaging Environmental Resilience Resilience? 


Ure dines T : 56 Faces of Cyber Resilience 
nderstanding Transportation 56 Actions That Improve Cyber 


Resilience: An Economic 


: Resilience 
Perspective 59 Engaging with Cyber Resilience 
39 Essential Points 59 A Scenario: Test for Cyber Resilience 
40 Introduction Readiness 


Understanding Transportation 
Resilience: An Environmental 
Perspective 


This section of NCHRP Research Report 975 has been written for transportation policy makers 


and executives to provide a mechanism by which they can engage their peers together with 
elected and appointed officials who may be unfamiliar with the conversation surrounding trans- 
portation resilience. 


1 
De 
3. 


The contents of this section address three critical questions: 


What is the environmental perspective of transportation resilience? 
Why is this issue critical or important to my agency and me? 
What do you want me to do about it? 


Of necessity, the treatment of these questions is both broad and brief. Detailed guidance 


is contained in NCHRP Research Report 976: Resilience Primer for Transportation Executives 
(Matherly et al. 2021), which was developed under NCHRP Project 20-59(55), and in additional 
material developed by the NCHRP, the FHWA, and others. 


The discussion takes as a scientific baseline the reports produced by the U.N. Intergovern- 


mental Panel on Climate Change (IPCC), the international body responsible for assessing the 
science related to climate change; the U.S. Global Change Research Program, a consortium of 
13 federal agencies; and the U.S. National Academies of Sciences, Engineering, and Medicine. 
The report does not evaluate the science presented in those reports. 


Essential Points 


Transportation infrastructure resilience refers to the ability of the transportation system to 
recover from or adapt to significant disruptive events. One benchmark of a resilient system 
is to have a formal integrated investment and operational management strategy designed to 
maintain or restore functionality that would otherwise be compromised. 

Resilience management has short-term (hours to months), intermediate (years to decades), 
and long-range (decades and longer) dimensions that roughly correspond to operations, 
engineering, and planning responsibilities. These dimensions are dynamic and interrelated. 
Resilience management leverages pre-existing risk management frameworks, although resil- 
ience and risk are not the same things. Resilience-enhancing recommendations are reflected 
in updated emergency operations plans, revisions to engineering standards, and in statewide 
and metropolitan transportation planning processes. 

The transportation infrastructure sector is vulnerable to a wide range of environmental 
(i.e., meteorological, climatic, geologic, and cosmic) hazards (see text box). No region or 
mode of transportation is immune, although specific risks vary greatly by agency, location, 
and mode. 
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Environmental Hazards Challenging 


Transportation Resilience 


Heavy Rainfall and Runoff 
Heavy Snow and Ice Storms 
Flooding and Storm Surges 
High Winds and Tornados 
Hurricanes and Cyclones 
Extreme Heat and Heatwaves 
Extreme Cold 

Drought 

Wildfires 

Lightning 

Rock Falls and Landslides 
Avalanches and Mudslides 
Earthquakes and Tsunamis 
Sinkholes 

Volcanoes and Lava Flows 


Space Weather and Solar Storms 


Sea-Level Rise and High Tides 
Groundwater 


Many of these hazards are related to the earth’s climate, resulting 
in increasingly severe or unusual weather as the “new normal.” The 
greatest climate-related risks to transportation are extreme heat, 
heavy downpours, and rising sea levels, all of which are projected to 
increase in the coming decades. 

Environmental disasters resulting from these phenomena reduce 
system reliability and performance, drive up user costs, accelerate 
deterioration, and increase total infrastructure life-cycle costs. 
Additionally, weather-related disruptions or loss of services, particu- 
larly when viewed as preventable, erode public trust, impact local 
and regional economies, and generate significant criticism from 
elected officials, the media, and the traveling public. 

During the 20th century, policy promised that the nation would 
do whatever necessary to repair and restore damaged infrastruc- 
ture using a combination of federal, state, and local resources. The 
21st-century reality is that the severity and frequency of extreme 
events are increasing, and many communities can no longer rely on 
outside resources to be made whole. 

A national, “one-size-fits-all” resilience strategy is neither desirable 
nor achievable. The emerging, resource-rich, urban “megaregions” 
enjoy many more resilience options than do “underperforming,” 
mostly rural, regions. This gap between the “haves” and the “have-nots” 
is projected to widen over the next century. 

Although the need for a more-effective set of short- and long-term 
resilience strategies is increasingly obvious and urgent, many political, 


institutional, scientific, and technical barriers exist. Finding creative ways to overcome these 
barriers is a critical challenge for transportation leadership. 

e DOTs cannot go it alone. Although the DOT may be the designated lead agency for transpor- 
tation infrastructure, collaborative and cooperative community-based initiatives are crucial. 


Introduction 


Jupiter, Zeus, Thor, Ba’al, Indra, Perun, Tlaloc. Throughout history and across many cul- 
tures, human beings have personified and named extreme weather phenomena. Primitive 
peoples justifiably felt at the mercy of forces they couldn’t predict, appease, or control, and 
which they experienced as powerful, irascible, capricious, and destructive entities. The prudent 
person hunkered down, waited out the storm, and when the skies cleared, picked up the pieces 


and carried on. 


Perhaps unsurprisingly, this basic strategy has survived intact to the present. The Dragon 
Kings of Chinese mythology may have been replaced by storms with names like Katrina, Irene, 
Sandy, and their “siblings,” but the default strategy for environmental disaster resilience can 
be summarized as “since extreme events occur so infrequently in random places, wait until 
something really bad happens and then do whatever it takes to restore things to their previous 
condition using whatever resources are necessary.” 


It’s not a bad plan—except that extraordinary events are now becoming ordinary. Heavy 
storms are becoming more frequent and in many cases, more severe. Deadly heatwaves are 
occurring in places that have never before experienced triple-digit temperatures. Affected places 
no longer look quite as random as they once did, and the costs for post-disaster repair or recon- 
struction are beginning to challenge even the federal government’s ability to provide emergency 
relief. Entire communities have been abandoned as the costs to restore public infrastructure and 
private property far exceed their economic value. 
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This “new normal” is creating an inconvenient reality for all DOTs and their senior leader- 
ship. Although they have been dealing with the triple challenges of increasing financial pres- 
sures, accelerated project delivery expectations, and a changing workforce while providing 
effective programs that are responsive to the communities they serve, these agencies now must 
alter their operational priorities to deal with evolving environmental and climatic change. Con- 
sequently, DOTs across the nation now have to manage transitions to different ways of thinking 
about innovative approaches to providing services. 


Public-sector transportation agencies are no longer solely focused on building the nation’s 
infrastructure, as they have been for nearly 100 years. Their already complex mission—focused 
on mobility, accessibility, safety, and environmental stewardship—is now driven by additional 
demands for security, reliability, and resilience. 


Resilience, defined as the ability to recover from or adapt to significant disruptive events, 
has many faces (see Figure 2-1). It affects the full range of traditional transportation functions 
(e.g., planning, engineering, maintenance, and operations spanning all modes of transporta- 
tion) and is a central issue within other, interdependent and critical infrastructure sectors 
such as communications, emergency services, energy, government services, and IT. Planning 
for, provisioning, and operating a resilient transportation system encompasses time horizons 
that begin today and look 50 years into the future and beyond. The challenge associated with 
implementing strategies for resiliency arises from the scope, scale, and complexity of system 
resilience and related topics. 


A quick scan of the range of environmental hazards potentially affecting transportation 
system functionality reveals a daunting array of meteorological, climatic, geologic, and even 
cosmic events. Although each of these risks needs to be carefully planned for, mitigated, and 
managed, this discussion will not be able to cover each hazard separately. An informal survey 
of DOT emergency managers across the nation indicated that the two types of hazards of most 
interest and concern related to “too much heat and too much water.” This impression was 
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Source: Fletcher and Ekern (2017) 


Figure 2-1. Faces of resilience. 
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reinforced during the NCHRP project team’s review of the research literature. Consequently, 
this discussion paper focuses on extreme temperatures, severe storms, and sea-level rise. 


To advance the understanding of extreme weather and rising sea-level impacts and their 
effects on state DOTs as they move into the 21st century, the journey begins by understanding 
climate and weather trends across the United States. 


Weird Weather: The New Normal 


In response to the Global Change Research Act of 1990, the U.S. Global Change Research 
Program in partnership with the National Academy of Sciences and the Federal Committee 
on Environment, Natural Resources, and Sustainability, supported by over 300 technical 
experts, published Climate Change Impacts in the United States: The Third National Climate 
Assessment (Melillo et al. 2014). This 2014 document is intended to assist decision making 
at all levels by providing a national summary of the most recent climate change science. The 
report also projects climate-related trends and impacts from 2014 throughout the rest of the 
coming century. 


U.S. Climate Trends 


Over the past several decades, several notable changes to the nation’s climate have occurred 
(see text box). Heatwaves have become more frequent, had longer durations, and involved 


Climate Change Impacts on Infrastructure 


Global climate is changing and this is apparent across the United States in a 
wide range of observations. 


Some extreme weather and climate events have increased in recent decades, 
and new and stronger evidence confirms that some of these increases are 
related to human activities. 


Impacts related to climate change are already evident in many sectors and are 
expected to become increasingly disruptive across the nation throughout this 
century and beyond. 


Infrastructure is being damaged by sea level rise, heavy downpours, and extreme 
heat; damages are projected to increase with continued climate change. 

Sea level rise, storm surge, and heavy downpours, in combination with the 
pattern of continued development in coastal areas, are increasing damage to 
U.S. infrastructure including roads, buildings, and industrial facilities, and are 
also increasing risks to ports and coastal military installations. Extreme heat 

is damaging transportation infrastructure such as roads, rail lines, and airport 
runways. 


Planning for adaptation (to address and prepare for impacts) and mitigation 
(to reduce future climate change, for example by cutting emissions) is becoming 
more widespread, but current implementation efforts are insufficient to avoid 
increasingly negative social, environmental, and economic consequences. 


Source: Melillo et al. (2014) 
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higher temperatures, whereas cold spells have abated. Droughts and heatwaves are projected to 
become more severe, particularly in the Southwest. 


Winter storms have increased in frequency and intensity, and their tracks have shifted 


northward. Meanwhile, the intensity, frequency, and duration of North Atlantic hurricanes 
have increased. 


Temperature Trends 


In the United States, the average temperature has increased by 1.3°F to 1.9°F since record-keeping 
began in 1895; and most of this increase has occurred since about 1970 (see Figure 2-2). The 
most recent decade was the nation’s warmest on record. The current decade looks to be even 
warmer. Although temperature rise is not uniform across the country or over time, it is 
expected to continue. Rising temperatures across the United States have reduced lake ice, sea 
ice, glaciers, and seasonal snow cover over the past few decades. 


The length of the frost-free season (and the growing season) has been increasing since the 
1980s as plant hardiness zones continue to shift northward (see Figure 2-3). During the period 
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Figure 2-2. Temperature change, 1991-2012, compared to 1901-1960 average. 
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Figure 2-3. Observed increase in length of frost-free 
season. 


from 1991-2011, the average frost-free season was about 10 days longer than during the 
period from 1901-1960. At the same time, ice and snowmelt have been occurring earlier in 
the spring, resulting in more flooding and affecting watershed ecosystems and agriculture. 


Rainfall and Snowfall Trends 


Average annual rainfall in the United States has increased—an effect in part attributable to 
the warmer atmosphere holding more moisture—although some areas have seen reduced pre- 
cipitation (see Figure 2-4). More winter and spring rainfall is projected for the northern United 
States and less for the Southwest. 


Across most of the United States, the heaviest rainfall events have become heavier and more 
frequent. The amount of rain falling on the heaviest rain days has also increased over the past 
few decades. Increases in the frequency and intensity of heavy downpours are projected across 
the entire country (Figure 2-5). 


Sea-Level Rise 


Sea-level rise is caused by a combination of thermal expansion of the oceans (caused by 
increased atmospheric heat due to climate change) and the melting of glaciers and the great 
ice sheets of Greenland and Antarctica. New data show that the recent increase of global mean 
sea level (GMSL) of approximately 8 inches has been much greater than at any time in at least 
the past 2,000 years. Since 1992, the rate of GMSL rise has been roughly twice the rate observed 
over the last century, providing evidence of additional acceleration. The 2014 IPCC Summary 
for Policy Makers projects that GMSL rise will continue during the 21st century, very likely at 
a faster rate than that observed from 1971-2010 (IPCC 2014). Although projected rates and 
amounts vary, a January 2017 report by the National Oceanic and Atmospheric Administration 
(NOAA) suggests that a rise of GMSL in the range of 1 foot-8 feet (0.3 meters—2.5 meters) is 
possible within the coming century (NOAA 2017). 
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Figure 2-4. Precipitation change, 1991-2012. 
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Figure 2-5. Change in very heavy precipitation, 
1958-2012. 
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Sea-level rise differs from extreme weather in at least two essential ways: First, it is a coastal 
phenomenon of primary interest to only half of the states. Second, unlike the brief periods asso- 
ciated with extreme heat or rainfall, creeping sea levels are slow, continuous, and inexorable. 


Weather Trends Summary for Transportation 
Policy Makers 


The impacts from extreme weather events and rising temperatures are affecting the reliability 
of the U.S. transportation system in many ways. Extreme weather disasters are considered 
“lumpy”—that is, they are unpredictable in type, location, frequency, and impact. Nonetheless, 
they currently disrupt transportation services in all areas of the country, negatively affecting 
system operators and users alike, and projections indicate that such disruptions will increase. 
By definition, this situation increases the overall risk to the system. 


Sea-level rise (and rising coastal groundwater levels), coupled with tidal movements and 
storm surges, will continue to increase the risk of major coastal impacts on transportation infra- 
structure, including both temporary and permanent flooding of airports, ports and harbors, 
roads, rail lines, tunnels, and bridges (Figure 2-6). 


Extreme weather and sea-level rise are factors that accelerate infrastructure repair and replace- 
ment cycles and reduce overall system reliability and performance while driving up investment 
and operating costs. This situation affects all modes in all regions of the United States. 


In addition to short-term extreme weather events, long-term climatological trends are 
resulting in a “new normal” climate regime affecting all aspects of transportation. This new 
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Figure 2-6. Airports with at least one runway vulnerable to storm surge at the depicted elevation. 
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normal weather is increasing, and will continue to increase, the total cost of the nation’s trans- 
portation systems to the taxpayer and the system users. 


The downward spiral of increased risk, diminished reliability, and lower performance, driven 
by an increasingly chaotic environment and constrained by limited disaster relief funding, 
requires immediate and thoughtful adoption of resilience management practices by every trans- 
portation infrastructure owner. 


The Importance of Environmental Resilience 


Over centuries of practice, engineers have learned to accommodate an unpredictable environ- 
ment by relying on historical norms to set reliable, long-lasting benchmarks for their design and 
construction standards. Unfortunately, this approach is being overtaken by events, and even 
current planning and design assumptions may no longer be adequately addressed by existing 
standards. 


The 100-year storm is now occurring once a decade in some locations; bridges are being 
overtopped by storm surges at high tide for the first time. A gradually warming climate is accel- 
erating asphalt deterioration, and heatwaves are causing buckling of pavements and rail lines 
and endangering construction and maintenance personnel working outdoors. Extreme tem- 
peratures are also placing significant demands on the power/energy grids, which may impact 
the transportation infrastructure, particularly if significant parts of the interconnected grid go 
down. Stream flows based on increasingly frequent and intense rainfall instead of slower snow- 
melt increase the likelihood of bridge damage from faster flowing streams. Less snow in some 
areas is reducing snow removal costs and extending construction seasons while other DOTs are 
depleting their winter maintenance budgets weeks before the end of the season. 


‘The examples are real, compelling, and—along with other climate changes—occur in every state. 


In the direst of cases, some coastal ports and airports are projected to be underwater within 
the planning horizons of their operating authorities. Clearly, highways, rail connections, and 
other low-lying infrastructure associated with these facilities also are threatened. 


In addition to these direct impacts on system assets, our society has come to expect a safe, 
secure, and reliable transportation system. Significant loss of service, particularly when viewed 
as preventable, erodes public trust, impacts local and regional economies, and generates sig- 
nificant criticism from elected officials, the media, and the traveling public. 


A Resilience Management Approach 
to Environmental Hazards 


What can a state DOT executive do now or worry about when it comes to creating resiliency 
against extreme weather and/or sea-level rise, and how does that DOT harness and augment 
its resources to sustain operations and protect its assets in the face of impacts from changes 
in weather? 


The framework presented in Table 2-1 is adapted from the 2006 National Infrastructure Pro- 
tection Plan (NIPP) Risk Management Framework, which calls on each infrastructure sector 
to identify those functions, assets, networks, systems, and people (FANSP) that make up the 
nation’s critical infrastructure and its key resources. Table 2-1 and Table 2-2 present the FANSP 
framework and environmental impacts on the resilience framework as these concepts were 
further developed in the May 2007 Critical Infrastructure Plan (DHS 2007). 
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Table 2-1. FANSP resilience management framework. 


The business processes, workflows, job assignments, tasks, and positions 
in a state DOT that are critical to the performance of continued 
transportation service through any hazard or disruption 


FUNCTIONS 


The infrastructure, equipment, resources, tools, vehicles, hardware, 
roadways, bridges, tunnels, and other facilities owned and operated by a 
state DOT or other authority that ensure the continued safe transport of 
goods and people through any hazard or disruption 


The relationships maintained by a state DOT with local municipalities, 
contractors, the private sector, and other branches of local, tribal, state, 


MRIS and federal government to ensure the continuity of transportation 


operations through any hazard or disruption 


The critical information technology platforms, applications, and networks, 
including all electronic forms of data, used by state DOT personnel to 
operate its assets and infrastructure, support functional continuity, and 
enable network communication and reliability through any hazard or 
disruption 


The necessary personnel needed by a state DOT to ensure that 
transportation services are provided through any hazard or disruption 


Environmental impacts on the resilience framework. 


SYSTEMS 


PEOPLE 


Source: DHS (2007) 


Table 2-2. 


Severe Storms (Heavy 
Rainfall, Runoff, 
Flooding, Heavy Snow, 
Ice) 


Extreme Heat 
Heat Waves 


Sea Level Rise (Storm 
Surge, High Tides) 


Safety, Traffic Impact; 
Construction Project 
delay; Debris, 
Evacuations, Operations 
uncertaint 


Safety, Traffic Impact; 
Construction Project 
delay 


Functions Increased MOT 


Accelerated loss of 
Performance; 
Temporary or permanent 
loss of asset; 
Damage; 
Accelerated replacement 
and maintenance costs 


Accelerated loss of 
performance; 
Temporary or permanent 
loss of asset 
Damage; 
Accelerated replacement 
and maintenance costs 


Accelerated loss of 
performance; 
Temporary or permanent 
loss of asset; 
Damage; 
Accelerated replacement 
and maintenance costs 


Enhanced 
Cooperation/Coordination 


Enhanced 
Cooperation/Coordination 
COOP/COG Activation COOP/COG Activation 
EMAC Activation EMAC Activation 


Loss of availability Loss of availability Loss of availability 
Loss of integrit Loss of integrit Loss of integri 


Enhanced 


Rew ors Cooperation/Coordination 


Systems 


People 


Externalities 


Environmental Illness 
Emotional Trauma 
Inju 
Increased delay/detour 
time, length, user cost; 
Environmental 
degradation; Loss of 
business income; 
Ancillary damage cost, 
Public perception 


Environmental Illness 
Emotional Trauma 
Psychological Stress 


Increased GHG 
emissions 


Relocation 


Environmental 
degradation; Loss of 
business income, 
Abandonment and 
migration 


EMAC = Emergency Management Assistance Compact; GHG = greenhouse gas; MOT = maintenance of traffic. 


Source: DHS (2007) 
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Each framework element depends on every other to perform adequately; all must perform for 
the system to operate. The framework is operationalized by developing a series of interrelated 
architectures using the unique items and inventories controlled by a specific DOT. In most 
DOTs, the resilience framework is based on and incorporated into their existing asset manage- 
ment, performance management, risk management, and information resource management 
programs. Once the resilience architecture is in place, its components can be assessed for their 
level of resilience (i.e., redundancy, backup, substitution,) and their need for modification or 
adaptation. Results of the resilience assessment can be reflected in emergency operations plans, 
engineering and construction standards revisions, and statewide and metropolitan long-range 
transportation plans. 


Each distinct event challenges the system differently. In addition to the primary (generic) 
impacts on individual elements as shown in Table 2-2, there are indirect and synergistic con- 
sequences to be considered. For example, a possible “hidden” impact related to “People” might 
be the loss of productivity resulting from careening from one disaster to another. This could be 
a result of “burnout,” increased absenteeism, time spent in abnormal operations, chronic envi- 
ronmental illness or injury, excessive worry about family, and so forth. 


The “Networks” component of the framework could become one of the major stumbling 
blocks for DOTs. Successfully resilient communities (and states) will require trusted and secure 
information sharing platforms and communication systems to ensure resilience and sustain- 
ability in the system. Accomplishing this within and between diverse organizations with 
differing priorities, missions, and resources will require a new institutional approach. 


Although this framework is shown as a static architecture, DOTs should recognize that inte- 
grating the short-term, medium-term, and long-range planning horizons that are needed to 
respond to long-term climate trends is challenging, particularly because climatic factors are not 
included in the NEPA process. Each environmental hazard has a short-term (hours-months), inter- 
mediate (years to decades), and long-range (decades and longer) resilience dimension roughly 
corresponding to maintenance and operations, engineering, and planning responsibilities. 
These dimensions are related and influence each other. Visualize the framework as a 3-dimensional 
dynamic entity where every resilience element, risk factor, and resilience strategy moves through 
a temporal dimension that stretches decades into the future. This multi-dimensional perspective 
will tax even the most mature of today’s enterprise risk management approaches. 


Note also that transportation is just one ofa set of interdependent critical infrastructures that 
are also affected by climate extremes and are concurrently developing their resiliency plans. 
As an example, consider the many interdependent relationships between transportation and 
the energy sector. An active Atlantic hurricane season that damages ports along the Gulf of 
Mexico also may have an impact on refining facilities, thus affecting fuel availability and prices 
far away from the storm path. Similarly, extreme weather events that disrupt the fuel supply 
for electric generating facilities result in cascading transportation system impacts from black- 
outs or brownouts. 


Understanding Regional Differences 


AASHTO and its member states have long maintained a delicate balance between the desire 
for national uniformity and the need to recognize local differences. This balance is further 
strained by the dawning recognition that many places in the nation lack the resources to either 
recover from or adapt to environmental disasters yet can no longer rely on outside resources to 
be made whole. At the same time, the interdependencies between various infrastructure sectors 
preclude a DOT from implementing resilience in a vacuum. 


35 


36 Transportation System Resilience: Research Roadmap and White Papers 


These factors imply that a “one-size-fits-all” approach to resilience is neither desirable nor 
achievable. Large urbanized areas of the country, or megaregions, have far greater resources to 
recover from or adapt to environmental disaster than do second-tier municipalities and rural 
areas or “underperforming” regions. Although federal and state relief funds have been histori- 
cally used in an attempt to equalize this disparity, those funds are no longer guaranteed. New 
Orleans’ post-Katrina experience provides stark evidence to those who doubt this assertion. 


e Forecasts of population growth in the United States show the total population increasing 
40% to 430 million people by the year 2050. Throughout the nation, this new growth will 
primarily be concentrated in 8 to 10 emerging “megaregions”—large networks of metro- 
politan areas connected by cultural, environmental, and economic characteristics, as well 
as by shared infrastructures, including transportation (Figure 2-7). Between now and the 
year 2050, more than half of the nation’s population growth and as much as two-thirds of 
its economic growth will occur in megaregions. Today, megaregions contain 31% of all the 
counties in the United States, 26% of the square miles of the country, and 74% of the country’s 
population. 

e In contrast, underperforming regions are those which are below national averages in terms 
of population growth, employment, and wages. As depicted in Figure 2-8, the majority of 
these underperforming areas are located in small rural states, the South, the Great Plains, the 
northern Rockies, and the Rustbelt area surrounding the Great Lakes. 
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Figure 2-7. Emerging megaregions in the United States. 
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Figure 2-8. Underperforming regions in the United States. 


e Extended transportation and communication networks of metropolitan centers and their sur- 
rounding areas often cross municipal, county, tribal, and state boundaries, creating numerous 
operational interdependencies and challenges. These challenges reach across traditional juris- 
dictional boundaries, making current resilience planning strategies and governance models 
grossly inadequate. As a consequence elected officials, along with infrastructure executives, 
including DOT leaders, should be prepared to collaborate across many institutional and 
administrative lines. 


Environmental Resilience Summary for Transportation 
Policy Makers 


Weather-related disruptions or loss of services, particularly when viewed as preventable, 
erode public trust, impact local and regional economies, and generate significant criticism from 
elected officials, the media, and the traveling public. 


Resilience refers to the ability to recover from or adapt to significant disruptive events. Resil- 
ience management is an integrated infrastructure investment and operational strategy designed 
to maintain or restore functionality that would otherwise be compromised. 
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Resilience management leverages pre-existing risk management frameworks, although resil- 
ience and risk are not the same things. Resilience-enhancing recommendations are reflected in 
updated emergency operations plans, revisions to engineering standards, and in statewide and 
metropolitan transportation planning processes. 


Resilience management has short-term (hours-months), intermediate (years to decades), and 
long-range (decades and longer) dimensions roughly corresponding to operations, engineering, 
and planning responsibilities. These dimensions are dynamic and interrelated. 


A national, “one-size-fits-all” resilience strategy is neither desirable nor achievable. The 
emerging, resource-rich, urban “megaregions” have many more resilience options than do 
“underperforming,” mostly rural regions. This gap between the “haves” and the “have-nots” is 
projected to widen over the next century. 


Engaging Environmental Resilience 


Although the need for a more effective set of short- and long-term resilience strategies is 
increasingly obvious and urgent, many political, institutional, scientific, and technical barriers 
exist. Finding creative ways to overcome these barriers is a critical challenge for transportation 
leadership. 


As presented in this discussion paper, environmental issues arise within three time frames: 
(1) immediate, (2) over the lifetime of individual assets, and (3) over very long periods. This 
framing corresponds with the asset management life-cycle and with organizational structures 
focused on operations, engineering, and planning distinctions. 


The following discussion questions were derived from common barriers that organizations 
identified they encounter as they attempt to develop and introduce more formal resilience 
management approaches. The questions listed are intended to provide a basis for fruitful discus- 
sion. Recommendations already exist for addressing some of these questions (see Appendix C); 
addressing other questions will require new research projects. 


e How have the impacts of environmental change affected your state in the past? What envi- 
ronmental impacts do you project affecting your full set of modal assets, networks, and systems 
over the next 5 years, 10 years, and 50 years? Have you considered beneficial aspects as well 
as harmful ones? 

e Do you have policies and plans in place that address these impacts from operations, program 
delivery, and long-range planning perspectives? 

e Do you have a strategy for overcoming the polarization and politicization of environmental 
topics such as climate change? 

e Do you have a plan for integrating environmental resilience into your agency culture, mission, 
customer service objectives, business planning priorities, asset performance measures, or 
other strategic initiatives? 

e Environmental disasters take a human toll on employees. Are you prepared for post-disaster 
employee trauma, burnout, absenteeism, relocation stress, and other effects? 

¢ How will you resolve the conflict between resilience and value engineering objectives in your 
project delivery process? 

e Are you supporting AASHTO, TRB, and ITE resilience initiatives? Are you investing in 
resilience-focused education and training for your executive staff, your employees, and your 
business partners? 

e What will it take for you to personally own this issue? 


Understanding Transportation 
Resilience: An Economic 
Perspective 


This section of NCHRP Research Report 975 has been written for transportation policy makers 
and executives to provide a mechanism by which they can engage their peers together with 
elected and appointed officials who may be unfamiliar with the conversation surrounding trans- 
portation resilience. 


The contents of this section address three critical questions: 


1. What is an economic perspective of transportation resilience? 
2. Why is this issue critical or important to my agency and me? 
3. What do you want me to do about it? 


Of necessity, the treatment of these questions is both broad and brief. Additional discussion 
can be discovered from many sources, including the following: 


e NCHRP Research Report 970: Mainstreaming System Resilience Concepts into Transportation 
Agencies: A Guide (Dorney et al. 2021); 

e NCHRP Research Report 976: Resilience Primer for Transportation Executives (Matherly 
et al. 2021); 

e CRP programs for an economic perspective, see especially the NCRRP; 

oe TRB; 

e The National Academies of Sciences, Engineering, and Medicine; 

e FHWA; and 

e US. DOT. 


The contents in this section do not of themselves constitute a roadmap for change. Rather, 
they provide a discussion tool that is meant to help shape the topic and plot a short-term for- 
ward course. The discussion will not include a lengthy presentation of what resilience is or 
how it is defined. That subject has been covered in a previous AASHTO report, Understanding 
Transportation Resilience: A 2016-2018 Roadmap for Security, Emergency Management, and 
Infrastructure Protection in Transportation Resilience (Fletcher and Ekern 2017). The reader is 
encouraged to also review the contractor’s final report that provided the basis for the AASHTO 
publication. The contractor’s report is available at http://www.trb.org by searching “NCHRP 
Project 20-59(14)C. Contractor’s Final Report.” 


Essential Points 


e Although the nation’s transportation systems are generally reliable, disruptions to transporta- 
tion services are becoming more frequent, of longer duration, affecting more people, and are 
increasingly more expensive to resolve. 

e The most common causes of these disruptions are flooding—including seasonal flooding, 
storm-related flooding, and tidal flooding. Ninety-eight percent of all U.S. counties have 
experienced flooding at some point in their history. 
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e Sea-level rise will result in increased tidal flooding, storm surge, and greater wave action, 
and is projected to become the greatest threat to all U.S. coastal regions in the future. The 
consequences of this climate-related phenomenon will affect all states to varying degrees. 

e Inall cases, the lack of transportation systems resiliency to these threats becomes an impedi- 
ment to accomplishing all transportation system objectives over all planning horizons. 
Although short-term weather operations and traffic incident responses have improved dra- 
matically over the past 15 years, a systemic lack of common approaches to transportation 
resilience is imperiling long-range, multi-agency investments. 

e Resilience is not an independent systems objective but is an “objectives multiplier” affecting 
all other community and agency transportation objectives, such as system availability, acces- 
sibility, connectivity, safety, and so forth. 

e State DOTs play a supporting role in local and regional community development and long- 
range planning processes that ultimately determine transportation resilience priorities. 

e State DOTs and other agencies need to be mindful that certain resilience strategies, in general, 
may be unequally available and therefore inherently inequitable. Some communities have 
greater access to resources than others, giving them a wider range of options. Moreover, allo- 
cating public funding based on risk alone may “reward” some places at the expense of others. 

e Improving the resilience of the nation’s transportation systems is undeniably a benefit to 
society and a precautionary approach to potential adverse events (i.e., hazard mitigation) is 
justified in many situations. However, the decision maker needs to balance the proportion- 
ality of the risk with the cost and feasibility of other competing investment opportunities 
and benefits. Integrating resilience into structured risk-based asset management programs 
provides one mechanism to accomplish this. 


Introduction 


The garden harvests of the early 1890s were fascinating to Italian engineers, sociologists, 
economists, and political scientists—and to philosopher Vilfredo Pareto. Not only did they 
provide food for his young family, but the ever-curious Pareto noticed that roughly 80% of 
all his peas were coming from only about 20% of his peapods. In 1896, he applied this insight 
to property ownership and again found that 80% of all real estate in Italy was owned by just 
20% of the population. By the turn of the 20th century, Pareto was busy documenting similar 
relationships for many other political and social issues of his day. 


Almost 50 years later, American engineer and management consultant Joseph Juran dis- 
covered Pareto’s work and began applying it successfully to various quality control problems. 
He went on to suggest both a new management principle and its name: the Pareto Principle— 
also known as the 80/20 Rule. Stated simply the rule suggests that for many phenomena, 80% 
of the effects come from only 20% of the causes. 


The importance of this insight is intuitively obvious in our discussion of the economics of 
transportation resilience. Rather than trying to make the entire transportation infrastructure 
resilient to all hazards—which is both too expensive and too time-consuming—or randomly 
deploying ad hoc resilience strategies as events unfold—which is too inefficient and may be 
too late—the 80/20 rule suggests that by addressing the 20% of the hazards that are responsible 
for 80% of transportation disruptions, agencies can focus scarce resources most effectively and 
achieve an optimal level of resilience. 


The Main Thing: A Matter of Priorities 


Management guru Stephen Covey once advised that “The main thing is to keep the main thing 
the main thing.” And the main thing to worry about in a resilient transportation system is water, 
specifically too much of it in the wrong place. Although winter storms, high winds, heatwaves, 
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earthquakes, and other extreme environmental conditions can and do disrupt travel or damage 
infrastructure, flooding is by far the most frequent and expensive environmental hazard to the 
infrastructure. According to an article published by the Pew Charitable Trusts (Lightbody 2017), 


[fllooding is the costliest and most common natural disaster in the U.S., claiming lives, inflicting 
financial losses on households and businesses, and straining the government agencies that provide flood 
response and relief. From 1980 to 2013, flooding cost Americans more than $260 billion in damage; 
from 2006 to 2015, federal flood insurance claims averaged $1.9 billion annually. The pattern continued 
in 2016, with the federal government declaring 36 disasters involving floods or hurricanes. 


For those who believe that they are immune because they live inland or in arid parts of 
the country, according to the Federal Emergency Management Agency (FEMA), floods have 
occurred in 98% of all U.S. counties at some time, making this an issue of national significance. 


Table 2-3 summarizes more than 37 years of billion-dollar weather- and climate-related dis- 
asters that have occurred in the United States. Ignoring droughts and heatwaves, which have 
lesser effects on surface transportation, 81% of these mega-disasters were related to severe storms 
or flooding. Recent trends indicate that the total losses due to these events are increasing. This 
finding may be due to a combination of factors, including 


e A growing economy means more people and more developed land affected by a given disaster; 

e Rising construction costs, particularly after major disasters, inflate replacement costs; 

¢ The country continues developing in more vulnerable places such as coastlines, often elimi- 
nating their natural resilience (e.g., wetlands, barrier islands); 

e National Flood Insurance Program subsidies may encourage irresponsible behavior; 

¢ Current disaster funding is skewed towards least prepared states; and 

e The frequency and severity of natural disasters are increasing. 


From a transportation-centric perspective, Table 2-4 provides another illustration of the 
Pareto Principle and suggests a strategy for proceeding with our discussion of the economics 
of transportation resilience. In FY 2017, 31 states received a total of $670 million in FHWA 
Emergency Relief funds where roughly 80% of these events were related to storm or flooding 
damage. Previous FY emergency allocations show the same pattern. 


By the end of the 21st century, the most serious environmental threat to the nation is likely 
to be sea-level rise. Almost the entire U.S. coastline is projected to be affected to some degree, 
experiencing elevated water levels in the range of 1-8 feet depending on location and resulting 
in more frequent tidal flooding, greater storm surges, and more damaging wave action. Since 
sea-level rise is, in part, a consequence of warming oceans, this additional heat will fuel more 


Table 2-3. Billion-dollar weather disasters, 
1980-June 2017. 


CPI- 
: Numberof Adjusted 
Disaster Type ae se L 5 Spat 

(BS) 
Storms or Flooding 152 $899.8 5,328 
Drought/Heat | 24 $232.5 2,993 
Wildfire 14 $35.6 184 
Winter Storm 14 $42.7 1,013 
Freeze 8 $27.3 162 
All Disasters 212 $1,237.9 9,680 


Source: NOAA (National Centers for Environmental Information) 
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Table 2-4. 2017 FHWA emergency relief. 


Event Type Number (%) Allocation 
($M) 
Storms and Flooding 70 (80.5%) | $579.7 
Fire 5 (5.7%) $19.8 
Rock fall/Rockslide 5 (5.7%) $14.3 
Bridge Damage 5 (5.7%) $25.3 
Other 2 (2.3%) $31.3 
| Totals 87 (100%) | $670.4 


Source: FHWA 


severe tropical cyclones bringing historic rainfalls and catastrophic winds to mainland U.S. and 
Caribbean interests. The 2017 Hurricanes Harvey, Irma, and Maria provide a sneak preview of 
this projected future. 


The following statistics, from NOAA’s State of the Coast Report, highlight the economic 
activity and infrastructure at risk from rising seas (NOAA 1998): 


¢ $6.6 trillion: Contribution to GDP of the coastal shoreline counties, just under half of U.S. GDP in 2011. 

¢ 51 million: Total number of jobs in the coastal shoreline counties of the United States in 2011. 

¢ $2.8 trillion: Wages paid out to employees working at establishments in the coastal shoreline counties 
in 2011. 

¢ 39%: Percent of the nation’s total population that lived in coastal watershed counties in 2010 (less than 
20 percent of the total land area excluding Alaska), 

¢ 34.8 million: Increase in US coastal watershed county population from 1970 to 2010 (or a 39 percent 
increase). 

¢ 446 persons/sq. mi: Average population density of coastal watershed counties (excluding Alaska). 
Inland density averages 61 persons per square mile. 


As the effects of rising seas and more extreme weather take an ever-greater toll, citizens, com- 
munities, and businesses will be increasingly unable to recover and will be forced to abandon 
damaged areas. The tragic fate of Puerto Rico since Hurricane Maria struck in September 2017 
offers a grim harbinger of the future of many communities, absent significant changes to managing 
critical infrastructure. 


Notice that while this discussion has focused on flooding, specific regions of the country, 
communities, and supply chain managers may be exposed to other hazards of greater concern. 
‘They are encouraged to apply the Pareto Principle locally. The key takeaway is that all-hazards 
do not equate to every hazard in all places. 


An Economics Perspective of Transportation Resilience 


Transportation economists have long known that the set of roads and streets, bridges, ports 
and terminals fill multiple roles in the nation’s life (see Figure 2-9). Recalling a few basic facts 
will be useful when focusing on transportation resilience from an economic perspective. 


First, the transportation system is a significant national and community asset representing 
more than U.S. $13.7 trillion of public investment since 1956 and supporting many trillions of 
dollars more of additional economic activity in the private sector. Indeed, some transportation 
economists suggest that the average annual rate of return of this investment since the 1950s may 
have exceeded 18% per year. 
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Figure 2-9. Multiple perspectives of the 
transportation system. 


Since the 1980s, innovative business practices such as just-in-time manufacturing, just-in-time 
retailing, and e-commerce (i.e., just-in-time delivery) have revolutionized the global economy. 
Each of these innovations depends on reliable and resilient supply chains that are built on the 
global transportation infrastructure which is, in turn, also redundant, resilient, and reliable. 


Secondly and of most interest to state DOTs, is the Highway and Motor Carrier subsector, 
which includes more than 4 million miles of highways, streets, and roads; 600,000 bridges; 
350-plus tunnels; and 142,000 commercial vehicles. Linked together into a seamless network, 
highways provide a variety of essential services, including accessibility, mobility, and connec- 
tivity. During emergencies, the transportation network is also called upon to offer specialized 
lifeline services supporting evacuations of people and goods away from disasters and enabling 
emergency resources and responders access to disaster-stricken areas. 


Thirdly, this economic asset resolves into various modal components that together comprise 
the nation’s transportation systems critical infrastructure—one of 16 “... infrastructure sectors 
whose assets, systems, and networks, whether physical or virtual, are considered so vital to the 
United States that their incapacitation or destruction would have a debilitating effect on secu- 
rity, national economic security, national public health or safety, or any combination thereof” 
(DHS n.d.). The transportation systems sector is subdivided into seven subsectors or modes, 
including aviation, highway and motor carrier, maritime, mass transit and passenger rail, pipe- 
line, freight rail, and postal and shipping. Notice that few state DOTs have operational respon- 
sibility for all modes within their respective jurisdictions, although these agencies may exert 
some control or influence as a consequence of specific regulatory or funding relationships. 


Finally, state DOTs are major purchasers of a wide variety of goods and services, including 
planning and engineering services, construction services and materials, infrastructure opera- 
tions and maintenance, and so forth. In some rural areas, they may be a major employer as 
well. The ability to quickly infuse capital into devastated areas magnifies this economic power, 
particularly when other kinds of economic activity have been disrupted. Finally, via their state 
motor vehicle departments, states generate a significant amount of public revenue through 
licensing, registration, inspection, and other user fees that can be used to fund transportation 
agency spending. 


According to the Congressional Budget Office, federal, state, and local government spending 
for transportation infrastructure totaled $279 billion in 2014, representing about 2.4% of GDP. 
This level of public funding has remained relatively constant in the post-WWII era. Although 
the majority of these investments have funded highways ($165 B), governments invested in mass 
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When the resilience 
framework is applied 

to cities and regions, a 
fundamental issue is the 
type of stress or disturbance 
affecting the area. Some 
stresses take the form of 
acute shocks, often natural 
or manmade disasters. In 
other cases, regions face 
chronic, long term strains, 
such as the decades of 
declining employment and 
population affecting many 
older American industrial 
areas. The measures and 
frames for evaluating 
resilience vary depending 
on the type of stress. And 
because the capacities 
needed to respond to each 
form of stress can differ, 
regions may be more 
resilient to one type of 
disturbance than another. 


—HUD (2012) 
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“Forget the political debate, 
forget the national debate, 
forget the debate about 
the science; think about what 
you're seeing right here. 
You've got to do something 
about it, and you've elected 
us to make decisions; you've 
elected me to make decisions, 
so I've got to do something 
about it. And then when you 
get into specific projects, it 
all makes sense to people.” 


—Jake Day, Mayor, 
Salisbury, MD 


transit, rail, aviation, and maritime infrastructure, as well. Keynesian economics suggests that this 
purchasing power has a stimulus effect on the economy. Other economic analyses suggest that 
this effect is magnified during post-disaster periods, although many economists disagree. 


To summarize, the economic value of the transportation sector is the sum of the contributions it 
makes to the economy. These contributions include: 


e Investments in community assets or infrastructure; 

e Services provided, such as access, connectivity, mobility, and emergency lifelines; 

e Economic stimulation, attracting industry and labor and generating commercial activity; 

e Revenue source (e.g., through federal funds, user fees, taxes); 

e Provision of a major market for energy, fuel, and materials such as concrete and steel; and 

e Interdependent enabling and use of other critical infrastructures such as communications, 
energy, and emergency services. 


This concept permits an enhanced understanding of transportation resilience: resilience 
concerns itself not only with the restoration of functional services, but also with preserving 
or restoring the total economic value of transportation after a major event. Notice that these 
events may result from natural or manmade disasters or may be the consequence of purely 
economic forces. 


Although the specifics vary among states, in general, all states, in cooperation with the federal 
government, have some combination of the following transportation system objectives guided 
by the four perspectives just presented: 


e Improve accessibility, mobility, and connectivity, across all modes, for all users; 
e Minimize service disruptions; 

e Preserve asset value; 

e Protect critical infrastructure components; 

e Stimulate the economy; and 

e Maintain interconnectedness with other critical infrastructures. 


These objectives set the context for transportation resilience, which has been defined as “the 
ability to prepare and plan for, absorb, recover from, or more successfully adapt to adverse 
events” (Fletcher and Ekern 2017). 


Consider the effects of flooding. In ail cases, flooding becomes an impediment to accom- 
plishing all DOT system objectives over all planning horizons. Moreover, flooding does so in 
some non-linear proportion to the magnitude (i.e., severity and extent) of the inundation. In 
other words, a flood twice as large will potentially have more than double the consequences. 
Flooded roads hinder lifeline services during a disaster, but they also may result in a loss of 
accessibility and mobility over a longer duration, reducing the quality of life and economic 
vitality of the community. Flooded roads also may result in significant physical damage to the 
infrastructure, reducing asset value and necessitating accelerated asset improvement projects. 


The discussion and example highlight a second essential finding: Resilience is not an inde- 
pendent systems objective but is, instead, an “objectives multiplier” affecting all other objectives. 
Successful resilience strategies will result in higher levels of access, mobility, and connectivity 
with fewer, less severe disruptions of service. Asset values will be maintained at lower life-cycle 
costs, and so on. In other words, resilience is not pursued for its own sake; rather, resilience is 
pursued in order to meet other objectives. Conversely, a lack of resilience, demonstrated by 
greater loss and slower recovery, negatively impacts all other aspects of the system’s perfor- 
mance which affects all other aspects of the community. 
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One of the most common misconceptions concerning resilience is that it is a “yes/no” sort 
of universal quality. People betray this bias in the way discussions are framed with questions 
like “Is this bridge resilient? Is the system resilient? Is this community resilient?” The questions 
themselves imply a static, “yes/no” answer. More sophisticated frames would add nuances 
to these questions: “Against what kind of adversity? To what degree? Over what period?” 


The salient point is this: Any discussion of resilience must begin with a thorough under- 
standing of risk. Although most discussions present single examples of the relationship between 
risk and resilience, in practice there will be dozens of assessments encompassing multiple com- 
binations of extents (e.g., asset, corridor, community, region) and threats (e.g., acute and long 
term, natural/human-caused, physical/economic shock). Each risk assessment seeks to quan- 
tify both the likelihood and the severity of adverse events using a combination of historical 
statistics and various forecasting methods. In general, the greater the likelihood of something 
happening to the system and the more severe the consequences of that event, the greater the 
risk is assessed to be. 


Portions of the infrastructure that are at extreme risk (i.e., the event is almost certain and 
the consequences include significant loss of life or property) require immediate action where 
normal resilience activities may be too late. Conversely, those portions deemed to be low risk 
can be dealt with on an ad hoc basis and resilience investments may be too expensive. After these 
risk “tails” have been eliminated, risk reduction strategies for the remainder of the system can 
then be developed and deployed. 


Transportation risk managers draw upon a variety of measures to reduce risk. Although these 
measures are both hazard- and site-specific, they all are aimed at reducing risk by 


e Reducing the cause(s) or likelihood of adverse events, or 
e Reducing the vulnerability (exposure) to hazard(s), or 
e Reducing the severity of the consequences(s). 


Implicit in these choices is the opportunity to improve the resilience of that component, cor- 
ridor, or region relative to a particular risk. In other words, improving the ability to preserve 
or recover system value by defending, adapting, or moving system components reduces system 
vulnerability and the severity of post-disruption effects, thereby reducing risk. 


Average time-to-recover, percent-loss-of-service, loss recovery curves, and other measures 
incorporate this concept. The idea is that pre-disturbance there exists some known “business- 
as-usual” level of performance. When an acute disturbance occurs, such as a severe storm with 
flooding, the system experiences some loss of functionality that requires some time necessary 
to fully recover (if ever). More resilient systems will experience less loss of performance and 
shorter recovery times than less resilient ones due to prior resilience investments. The difference 
between loss-of-functionality before and after resilience mitigation represents the total benefits 
realized by a more resilient system. 


Some of these benefits may include: 


e Shorter recovery time, 
e Less loss of function, and 
¢ Lower recovery costs. 


The fundamental issue is to develop an investment strategy that balances resilience investments 
with competing interests such as asset preservation, capacity expansion, safety, economic stim- 
ulus, and so forth. In many projects, these goals are either completely aligned, requiring no addi- 
tional investment, or can be harmonized with only marginal investment costs. The loss-recovery 
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curve can also apply to the local economy. State DOTs have a unique capacity to minimize the 
depth of loss of economic activity by reprioritizing DOT investments in the affected area. 


The point is that every dollar invested in resilience today may save multiple dollars in future 
emergency response and recovery costs. These savings increase as transportation risks increase. 
Improving the resilience of the nation’s transportation systems is undeniably a benefit to society, 
and a precautionary approach to potential adverse events is justified in many situations; how- 
ever, community leaders need to balance the proportionality of the risk with the cost and fea- 
sibility of other competing investment opportunities. 


Although not specifically labeled as such, over the past 15 years, DOTs, along with their 
partner organizations, have made a great deal of progress in improving the resilience of the 
system. Scalable, adaptive approaches to emergency operations and incident management are 
now operationalized in every state, to varying degrees. New threats (e.g., sea-level rise) are rec- 
ognized by those affected and adaptation strategies are evolving in some states. However, the 
severity, duration, and extent of disruptive events are increasing and challenging the abilities of 
communities and agencies to respond. 


A secondary cautionary note is important to recognize: Resilience investments are, in gen- 
eral, inherently inequitable. Certain communities, states, and megaregions, by definition, have 
access to resources that are unavailable to underperforming places, giving them a wider range 
of options. For example, building multi-million-dollar stormwater systems that are coupled 
with expensive levees and other flood control public works may be totally out of reach for 
many states and communities. And all too often, rescue, response, and recovery resources are 
unevenly distributed to the benefit of some and the detriment of others. 


Moreover, allocating public funding based on risk alone rewards some places at the expense 
of others. Given that the risk for any specific hazard is unevenly distributed in space and time, 
risk reduction and resilience-enhancing investments will also be unevenly distributed. 


Finally, the national trend to “socialize losses, privatize gains” inadvertently creates a moral 
hazard for those living in high-risk areas, distorts economic values, and ultimately increases 
costs for all states. Because transportation funding is essentially a zero-sum game, particular 
care should be exercised to ensure that the nation ends up doing well as it attempts to do good. 


Building Resilient Asset Management 


Although the most visible evidence of transportation resilience is often seen during severe 
weather operations, resilience management encompasses an integrated suite of management 
and technical approaches dealing with defending, adapting, or even abandoning critical infra- 
structure. The greatest gains in systems resilience occur when these activities are seamlessly 
woven into an agency’s asset management, risk management, and performance management 
practices. 


According to the FHWA, transportation asset management (TAM) is a strategic and system- 
atic process of operating, maintaining, upgrading, and expanding physical assets effectively 
throughout their life cycle. TAM is a business model, a decision support system, and a manage- 
ment approach that can be used across an agency to address five core questions: 


What is the current state of physical assets? 

What are the required levels of service and performance delivery? 

Which assets are critical to sustained performance? 

What are the best investment strategies for operations, maintenance, replacements, and 
improvement? 

5. What is the best long-term funding strategy? 


re Gi 
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Integrating resilience management and asset management processes provides the following 
immediate benefits to a DOT: 


1. Accurate inventories of assets and their pre-disaster condition; 

2. Sound maintenance practices within an asset management regime “hardens” assets; 

3. The hierarchal prioritization of critical assets conducted in a risk-based asset management 
program provides priorities for asset repair after events; 

4, Asset management and operations staff become competent at asset management scenario 
planning, which is critical when developing a post-event recovery plan; 

5. Sound asset inventories and good unit-cost data assist with estimating recovery costs; 

6. Complete and accurate data allow the faster development of contract plans immediately after 
an event; and 

7. Risk management capability provides not only critical before-event prioritization but also is 
useful in post-event recovery allocation of resources. 


The Business Case for Resilience 


Unfortunately, due to a lack of uniform national information documenting costs and ben- 
efits of various mitigation strategies, no specific values can be assigned to before-the-event 
investments. However, a study recently released by the National Institute of Building Sciences 
(NIBS)—the Natural Hazard Mitigation Saves: 2017 Interim Report—suggests that for every 
dollar invested in mitigation, society saves somewhere between $4 and $6 (Multihazard Mitiga- 
tion Council 2017). 


In the NIBS study, costs were defined to include up-front construction and ongoing mainte- 
nance over a 75-year economic lifespan to improve existing facilities or the additional up-front 
cost to build replacement facilities better. Benefits referred to the present value of the reduction 
in future losses due to mitigation. 


Benefits pertinent to transportation mitigation included reductions in 


¢ Deaths, injuries, and PTSD; 

e Repair costs; 

e Loss of revenue and other business-interruption costs; 
e Loss of income to residents; 

e Loss of economic activity in the broader community; 
¢ Loss of transportation services; and 

¢ Costs for search and rescue. 


Engaging Economic Resilience 


Although the need for a more effective set of short- and long-term resilience strategies is 
increasingly obvious and urgent, many political, institutional, scientific, financial, and technical 
barriers exist. Finding creative ways to overcome these barriers is a critical challenge for trans- 
portation leadership. 


The following discussion questions were derived from common barriers that organizations 
identified they encounter as they attempt to develop and introduce more formal resilience manage- 
ment approaches. The questions listed are intended to provide a basis for fruitful discussion. 
Recommendations already exist for addressing some of these questions (see Appendix C); 
addressing other questions will require new research projects. 


¢ Do you know the current and projected flooding risk and subsequent loss of value for your 
system? Do you know how this risk affects individual assets (e.g., bridge), community/ 
corridor, regional, statewide, or multistate areas? 
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Have you implemented formal asset management, performance management, and risk 
management approaches in your agency? Are these functions coordinated with each other? 
Are they coordinated with your traditional long-range planning, program delivery, and oper- 
ations functions? 

Have you integrated resilience requirements in these management systems? 

How will you resolve the conflict between resilience investments and value engineering 
objectives in your project delivery process? 

Do you have community and statewide plans reflecting integrated infrastructure recovery 
and mitigation priorities? 

Are you supporting AASHTO, TRB, and ITE resilience initiatives? Are you investing in 
resilience-focused education and training for your executive staff, your employees, and your 
business partners? 

What will it take for you to personally own this issue? 


Understanding Transportation 
Resilience: A Cyber Perspective 


‘This section of NCHRP Research Report 975 has been written for transportation policy makers 
and executives to provide a mechanism by which they can engage their peers together with 
elected and appointed officials who may be unfamiliar with the conversation surrounding trans- 
portation resilience. 


The contents of this section address three critical questions: 


1. What is a cyber perspective of transportation resilience? 
2. Why is this issue critical or important to my agency and me? 
3. What do you want me to do about it? 


Of necessity, the treatment of these questions is both broad and brief. Additional discussion 
can be discovered from many sources, including the following: 


e NCHRP Research Report 930: Update of Security 101: A Physical Security and Cybersecurity 
Primer for Transportation Agencies (Countermeasures Assessment & Security Experts, LLC, 
and Western Management and Consulting, LLC. 2020); 

e NCHRP Research Report 976: Resilience Primer for Transportation Executives (Matherly et al. 
2021); 

e NCHRP Research Report 970: Mainstreaming System Resilience Concepts into Transportation 
Agencies: A Guide (Dorney et al. 2021); 

e TRB; 

¢ The National Academies of Sciences, Engineering, and Medicine; 

e FHWA; 

e DHS; and 

e NIST. 


Essential Points 


e For the past 60 years, state DOTs have embraced cyber-driven innovation. 

e Over that period, DOTs have invested in three generations of overlapping technology: (1): IT, 
or information (i.e., data processing) technology; (2) OT, or operational (i.e., control systems) 
technology; and (3) CT, or consumer technology (i.e., technology used by people for their 
personal use). 

e Evenas technology-enabled transportation has produced many benefits to these agencies and 
the nation, each wave of innovation has introduced greater risk to the transportation system 
as users grow increasingly dependent on increasingly vulnerable and complex technologies 
over which DOTs have steadily lost control. 

e In response, DOTs are deploying two complementary strategies—cybersecurity and cyber 
resilience—to improve performance, reduce risk, and maintain the trust of their communities. 
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e Cybersecurity is not the same mission as cyber resilience. Cybersecurity focuses on protecting 
the confidentiality, integrity, and availability of data; cyber resilience focuses on preserving or 
restoring transportation and agency operations. 

e Cyber resilience is not a “thing.” Instead, it is a consequence of political, strategic, and opera- 
tional decisions made by elected officials and senior agency managers and is embedded in 
agency business policies, plans, processes, and workflows. 

e Senior DOT leadership needs to establish, promote, and enhance those core values associated 
with resilience in general and cyber resilience in particular. 

e The starting point for cyber resilience planning is to assume that cyber incidents will occur 
and will degrade, disable, or destroy not only digital assets but parts of the physical transpor- 
tation infrastructure as well. 

e Cyber incidents are becoming more frequent, more disruptive, and more costly, and DOTs 
no longer have the ability or the resources to mitigate this situation on their own. 

e Although DOTs have significant roles to play in restoring transportation services and func- 
tions after a cyber incident, in many cases the DOT will not be the lead agency, and DOTs 
will need to closely coordinate, collaborate, and communicate with others. 


Bonus: Cyber resilience is not primarily a technical problem—it is an ongoing predicament 
that requires constant management and oversight. 


What Is Past Is Prologue 


Looked at from any point of view, it was the most improbable set of circumstances. And—like 
many technological revolutions—this one was also driven by war: specifically, the Korean War. 


When the Korean War ended in 1953, thousands of young civil engineers demobilized and 
resumed their civilian careers, many of them in federal and state highway agencies. They had 
seen the world, and now they were looking for new challenges at home. 


Coincidently, that same year IBM announced the IBM 650 Magnetic Drum Data-Processing 
Machine, an intermediate sized computer capable of performing both business and scientific 
computations. The IBM 650 quickly established itself as the computing standard in universities, 
businesses, and government agencies, and it became the most popular computer of the 1950s. 
Many state highway agencies, including agencies in California, lowa, Texas, Washington, and 
Wisconsin, purchased the IBM 650 to support various labor-intensive data processing activities. 


Two years later, MIT hired a young assistant professor of surveying named Charles L. Miller. 
Miller, who would later become chair of MIT’s Civil Engineering Department, was exposed to a 
variety of post-war military-sponsored computer research and was quick to see the potential of 
applying computers to civil and transportation engineering problems, specifically to surveying, 
photogrammetry, and roadway design calculations. He would spend the next 40 years devel- 
oping software and educating engineers as the “father” of automated civil engineering. 


Meanwhile, President Dwight D. Eisenhower, motivated by his participation in the 1919 U.S. 
Army’s Transcontinental Motor Convoy, his WWII experiences with the German autobahn 
system, and his desire to divert the country’s attention from the stalemate in Korea, pushed for 
and ultimately signed the $25 billion National Interstate and Defense Highways Act of 1956. 
This legislation called for the construction of 41,000 miles of interstate highways to be completed 
over the next decade. 


All of the ingredients were now in place for an inevitable explosion of innovation within 
state highway agencies (see Table 2-5). They had a cadre of ambitious veterans eager to take on 
new challenges. They had become early adopters of emerging technologies, making significant 
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Table 2-5. DOT computing milestones. 


Year Units Degree of 
Cyber Milestone Introduced | (worldwide) | User Control 


Dawn of DOT Computing 1953 Very High 
Mainframes 1965 10K High 
Personal Computers 1983 2B Moderate 
Web Browsers 1994 2-3 B Moderate 
Smartphones 2007 2.7B Low 


Embedded Computing 


2010 12.5B Very Lo 
(Internet of Things) sa Rai 


investments in the earliest commercial computers, and they had access to surveying and design 
software developed by the leading university civil engineering department of its day. Perhaps 
most importantly, they had been given a grand mission, along with a big checkbook. 


In support of this mission, state DOTs would go on to establish the Highway Engineering 
Exchange Program (HEEP), a DOT-driven technology peer exchange forum, in 1959, and the 
AASHTOWare program, a DOT-funded software development cooperative, in the early 1970s. 
Both initiatives were integral factors in the successful diffusion of emerging transportation tech- 
nologies throughout the DOT community, and they remain active today. 


All of which is to point out that cyber-driven innovation is woven tightly into the fabric of 
the modern state DOT. Not only did those first-generation engineers learn how to transform 
primitive digital technology into productivity gains, but they also learned painful lessons about 
cyber reliability and cyber resilience. 


Critical Cyber Trends for Transportation Policy Makers 


After 50 years of pressure from the inexorable effects of Moore’s Law, which holds that the 
number of transistors on a chip doubles about every 2 years while the cost is halved, the cyber 
universe has evolved into roughly three overlapping “habitats” or domains: IT (information 
technology, also called data processing); OT (operational technology, also called control systems); 
and CT (consumer technology, meaning technology used by people for their personal use). 
Not surprisingly, significant overlaps exist among these domains. (Figure 2-10) 


In the early years of IT, DOTs installed and operated all of their computing resources in- 
house and in most cases developed all of their custom application software using DOT program- 
mers. The primary focus of IT was data processing, storage, and reporting, and the primary risks 
to this mission were losses of data integrity, confidentiality, and availability. Cyber resilience 
meant maintaining mainframe uptime and doing nightly data backups; cybersecurity was pri- 
marily focused on environmental threats to the data center such as heat, fire, and flooding; and 
the DOT cyber ecosystem consisted of a small number of highly trusted vendors, developers, 
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Information 
Technology 


Systems 


Operational ~ Consumer 
Technology Technology 
Systems Systems 


Figure 2-10. Technology 
domains. 


operators, and users with well-defined roles and responsibilities. Although many improvements 
to IT have been made over the past 60+ years, the original IT emphases—collect the data, process 
the data, protect the data—have remained constant. 


Each subsequent generation of IT innovation has enabled DOTSs to offer increasingly com- 
plex digital products and services in almost every one of its business areas. Table 2-6 high- 
lights a few examples from DOTs across the country. Although not perhaps intended by those 
responsible for it, the transportation “business” has become not only cyber-enabled but is now 
heavily cyber-dependent. Even a cursory review of the example systems suggests that cyber- 
failure means agency and transportation system failure, putting individuals, businesses, and 
communities at risk. 


Table 2-6. DOT cyber functions. 


Systems Type Category Example Systems 


Highway and Bridge Inventory and Inspection 


Asset Management 


Point of Sale Licensing, Titling and Registration 
Information Technology Business Manggenient Accounting, HR, Enterprise Resource Planning 
Fleet and Fuel Management 
Surveying 
Engineering CADD 
GIS 
Control Systems Advanced Traffic Management System 
Road/ Weather Systems 
SCADA Traffic Monitoring and Surveillance 
RR Crossings 
Opentionsliiechnalony Signaling Highway Signals 
FirstNet 


Highway Advisory Radio 
Dynamic/ Variable Message Signs 
Building/Property Access 

Tunnel Ventilation 

Fire Detection/Suppression 


Communications 


Building Management 


Social Media Traveler Information 


Consumer Technology 


Mobile Fieldjob App 


Source: CASE™, LLC and Western Management Consulting, LLC. (2016) 
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The advent of the Internet combined with the conversion of con- 
trol systems from analog to digital components, ushered in the age of 
operational technology (OT), sometimes referred to as industrial con- 


trol systems (ICS). Although these systems sometimes share compo- ¢ Law 1: Everything that is connected to 
nents with IT, they are distinguished from IT systems by their ability the Internet can be hacked. 

to monitor and control (i.e., alter) the state of things in the physical ¢ Law 2: Everything is being connected 
world. Common examples of OT used in surface transportation include to the Internet. 

highway signal and signage systems, tunnel ventilation and fire sup- e Law 3: Everything else follows from 
pression systems, road weather systems, and railroad crossing safety the first two laws. 


equipment. Unfortunately, as OT systems and components made the 
shift from analog to digital architectures, OT cybersecurity and cyber 
resilience design requirements were often overlooked (see text box). 


The results of OT failures have immediate real-world consequences involving human safety, 
property damage, or loss of equipment. These risks increase as OT moves into the harsh reality 
of the roadside environment that poses additional security, reliability, and resilience challenges, 
such as: 


e Cyber-attack (e.g., hack, malware, viruses, distributed denial of service [DDOS], ransomware); 
e Construction/maintenance damage; 

e Software updates and patches; 

e Earth movement (e.g., avalanche, rock fall, landslide); 
e Extreme weather (e.g., rain, snow, ice, wind, heat); 

e Fire; 

¢ Flooding (e.g., storm surge, sea-level rise); 

e Space weather (solar storm/coronal mass ejection); 

e Spoofing/jamming; 

e Theft/vandalism; 

e Operator error; 

e Sensor/actuator/processor failure; and 

e Vehicle/vessel impact. 


In addition, the growth of the DOT cyber ecosystem introduces additional risk into agency 
operations. In many DOTSs, OT is characterized by less technically experienced personnel oper- 
ating black-box components communicating over insecure networks, all of which had been sup- 
plied by an increasingly large number of unvetted vendors and consultants. Loss of control and 
loss of visibility are additional risks added to the previously mentioned potential for loss of data 
integrity, confidentiality, and availability. In all cases, cyber failures are accompanied by a loss 
of trust in the agency and in government in general. Analyses of recent major hacking events 
suggest that the erosion of trust is a primary objective of the attackers. 


Innovations in processor and storage miniaturization and in wireless broadband and cellular 
communications have resulted in a third type of technology: consumer technology (CT) some- 
times known as the Internet of Things (IoT). This modern era, beginning in 2007 with the intro- 
duction of the Apple iPhone, is characterized by billions of inexpensive devices connected to 
the global “cloud” and is exemplified by the smartphone, tablet computer, and smart speaker. 
A mind-boggling measure of just how far CT has progressed is that the 2010 Apple iPhone 4 had 
roughly the same raw processing power as a 1985 Cray-2 Supercomputer. 


Similar to the impact that IT and OT had in earlier times, CT is creating another set of sig- 
nificant disruptions within DOTs and other transportation organizations. Employees, travelers, 
shippers, carriers, citizens, and almost everyone else increasingly expect to have access to and 
seamlessly interact with the full range of DOT-supplied IT and OT services using a variety of 


Beckstrom’s Laws 
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devices, apps, platforms, and social media. People want to renew their auto registration, know 
when their street will be plowed, what time the next bus is, and the fastest way to get to work. 
And they want to know it immediately on their phone. Not surprisingly, this technology bazaar 
also attracts pranksters, criminals, hacktivists, and nation-state adversaries. Chaos is the order of 
the day, trust is the coin of the realm, and DOTs, along with every other enterprise with digital 
assets, are trying to adapt. In this new world, not only are IT data, OT controls, and CT privacy 
at risk, but enterprises are staking their reputations and risk losing the trust of their constitu- 
ents if they can’t deliver or if they violate constantly shifting behavioral norms such as losing 
personally identifiable information, for example. 


History, of course, doesn’t end with the present. The next generation of disruptive technology 
is already in the test beds and business plans of the visionary and the ambitious. Although 
picking winners in the innovation derby is a mug’s game, some combination of autonomous 
vehicles, all-electric drive trains, and collaborative consumption (i.e., mobility-on-demand) 
business models appear likely in the near term. According to the U.S. National Science Founda- 
tion, these cyber-physical systems (CPS) are physical and software components that are “deeply 
intertwined, each operating on different spatial and temporal scales, exhibiting multiple and 
distinct behavioral modalities, and interacting with each other in a myriad of ways that change 
with context” (NSF 2008). Proposed examples of CPS involving transportation include smart 
cities, smart power grids, automated and connected vehicles, and construction and maintenance 
robotics, all of which are currently in some stage of research and development. However, eco- 
nomic constraints, social equitability concerns, and political gridlock may impede the deploy- 
ment of these systems, at least in the United States. 


Even if the specifics of future transportation technologies are unknown, cyber incidents will 
certainly continue to increase, the consequences of cyber failure will become increasingly costly, 
and the demands for greater cybersecurity, reliability, and resilience will correspondingly grow. 
The DOTS’ collective inability to meet the demands in this new world will perhaps risk the loss 
of the entire franchise and lead to the total privatization of the transportation industry. 


Over the past 60+ years, state DOTs have successfully absorbed two waves of cyber innovation— 
IT and OT. Agencies now are in the middle of integrating a third wave, CT. A fourth wave, CPS, is 
already visible on the horizon and is expected to arrive in some places around 2025. It is important 
to note that the first of these deployments may not be by or in U.S. cities or states. 


This activity has already created an unbreakable linkage between the transportation systems 
infrastructure and the IT infrastructure. That is, it is no longer possible to address transporta- 
tion systems security, reliability, or resilience without simultaneously addressing cybersecurity, 
reliability, and resilience. The widespread adoption of fourth-wave technology will ultimately 
make the distinction between these two infrastructures arbitrary and meaningless. 


Although each wave has resulted in net positive benefits to agencies and their constituents, 
two reinforcing trends are troubling: 


1. Each wave of innovation has resulted in greater risk to the agency’s mission, its customers, and 
its assets as agencies grow increasingly dependent on increasingly vulnerable and complex 
technology. All dimensions of the risk equation are increasing (i.e., the threats, the exposure, 
and the consequences of failure), although the magnitude of their increases is uncertain. 

2. At the same time, each wave has resulted in less control by a DOT over the technology it 
relies upon. Thirty years ago, state DOTs owned and operated all of their computers while 
storing all of their data in-house. Today, fewer than half do. DOTs have slowly evolved from 
being technology owners to technology customers, while the technical staff at the DOTs have 
shifted from being system developers to system users. The likely conclusion of this trend is 
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that DOTs will continue to bear all the responsibility for cyber-based transportation services 
while continuously losing more of the necessary resources, knowledge, and authority to do so. 


Cybersecurity or Cyber Resilience? 


In general, enterprises—including state DOTs—have adopted two complementary approaches 
to managing cyber risks. These approaches are broadly referred to as cybersecurity and cyber 
resilience. 


Although similar in some of their technologies and practices, cybersecurity and cyber resil- 
ience are distinct concepts. Whereas cybersecurity focuses on the protection of digital assets 
(e.g., data, software, systems, networks, and equipment), cyber resilience focuses on preparing 
for, absorbing, recovering from, or adapting to adverse cyber events to continue the provision of 
digital products and services. In this context, cyber resilience is only meaningful in terms of pre- 
serving or restoring cyber-dependent business and transportation operations and is not focused 
on incidents that are intended to steal data. Of course, once an agency’s data have been compro- 
mised or stolen (i.e., once the agency’s security has been breached), resilience is irrelevant. 


Historically, organizations, the media, and the public have primarily been concerned with 
cybersecurity. That is, they have been concerned with the methods of protecting computing assets 
and data from unauthorized access, exploitation, damage, or loss. Although “bad guy” actors get 
most of the security publicity, many natural events can also disrupt digital services and cause 
inadvertent loss of function. Not surprisingly, government agencies—including state DOTs— 
have invested thousands of hours and millions of dollars in cybersecurity training, equipment, 
software, and data attempting to protect human life and safety, environmental quality, constit- 
uent privacy, and the billions of dollars of cyber assets from a myriad of adverse events. 


Except that it’s not enough. It will never be enough. 


Computer security experts admit the truth of the adage attributed to former Cisco CEO John 
Chambers: “There are only two types of companies in the world. Those that have already experi- 
enced a cyber breach and those that are going to.” Replace the word “companies” with the word 
“systems,” and the statement holds. 


The bad guys are getting smarter, equipment breaks, and people make mistakes. The world is 
flooding where it never used to and it’s hotter than ever causing electronic devices to malfunc- 
tion in unpredictable ways. And even if an agency could identify every single hazard facing every 
single piece of digital equipment and every bit of data, the agency will never have the time, talent, 
or resources to secure the agency against all of those hazards. 


By all means, it is important to practice good cyber hygiene, adopt industry best security 
practices, hire a cybersecurity expert, invest in firewalls and antivirus software, monitor your 
network, test your defenses, and train agency staff. 


Again, it is not enough. 


It might be prudent to have a plan for when a cyber crisis happens and it all goes pear-shaped. 
It might also pay to invest in the ability to limit the scope of the consequences of cyber failure 
and to know how to continuously deliver on the transportation mission at all times despite 
adverse cyber events, even when normal digital operations have failed. This ability of digital 
components (i.e., systems, networks, technology, applications, and data) of the transportation 
system to recover and regain functionality after a major disruption or disaster is referred to as 


Today we were unlucky, but 
remember we only have to 
be lucky once. You will have 
to be lucky always. 


—trish Republican Army 
communiqué, 1984 


There are only two types 

of companies in the world. 
Those that have already 
experienced a cyber breach 
and those that are going to. 


—John Chambers, 
former CEO of Cisco 
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cyber resilience. Cyber resilience also includes the ability to continuously adapt (i.e., change or 
modify) regular cyber delivery mechanisms as needed in the face of new risks. 


Faces of Cyber Resilience 


The application of the term cyber to qualify various aspects of agency leadership and manage- 
ment is unfortunate because the term tends to reinforce the myth that all situations designated 
cyber are technical in nature. This belief, of course, implies that their solutions are also technical 
and that the responsibility for both the situation and the solution lies with the “cyber” part of 
the organization. 


Cyber resilience is not a “thing” at all; rather, it is a trailing-edge indicator of the political and 
strategic decisions that are embedded in agency business processes. In other words, cyber resil- 
ience is an emergent property of both the agency and the portion of the transportation system 
it is responsible for shaped by agency mission, objectives, performance goals, and implemen- 
tation tactics. These business plan elements are in turn constrained by various political, legal, 
financial, and technical realities all of which are ultimately carried out by a workforce with its 
own unique set of knowledge, skills, experience, motivation, and culture. Integrating across all 
these aspects at any point in time provides a specific measure of cyber resilience that needs to 
be assessed against regulatory compliance, risk appetite, investment priorities, and so forth, to 
determine leadership’s subsequent response (Figure 2-11). The essential issue is not whether an 
agency s computers are cyber resilient but whether the DOT can, even in the face of adversity, 
keep people and goods moving in a safe, secure, and economical way. Cyber resilience is a pri- 
mary strategy available to DOTs to ensure this mission. 


Actions That Improve Cyber Resilience 


The scope and scale of managing an ever-evolving cyber resilience program are daunting, and 
it is outside the scope of this discussion to provide the detailed professional or technical guid- 
ance necessary to establish or improve the cyber resilience capability within a specific DOT. 
Successful programs mature over time, but the following list of programs and plans highlights 
core components that are common across many organizations and industries concerned with 
cyber resilience. Many of these components may already exist within the agency, perhaps under 


Operational - 


Cyber 


Resilience 


Figure 2-11. Faces of cyber resilience. 


Understanding Transportation Resilience: A Cyber Perspective 57 


different labels; many will need to be developed jointly with sister agencies, particularly with 
statewide IT, emergency management, and homeland security or law enforcement organiza- 
tions, where they exist. The components are: 


e Continuity of transportation and agency operations plans that include cyber failures; 
e Crisis communication plans; 

¢ A risk-driven critical cyber infrastructure protection program; 

e A risk-driven critical data protection program; 

e Information and control system contingency plans; 

e Cyber incident response and recovery plans; and 

e A general disaster recovery plan. 


Even a superficial scan of the DOT against these components will provide valuable insight 
into the agency’s likely degree of cyber resilience. Organizations lacking these components are, 
by definition, less resilient than those who have invested in them. 


In all cases, senior DOT leadership needs to establish and promote core values and skills asso- 
ciated with resilience in general and cyber resilience in particular. Equally important is the need 
to develop workflows and business processes that embed and reinforce cyber resilience policies. 
Some common process elements include: 


¢ Determine and communicate the importance of cyber resilience to your organization; 

e Use peer exchanges, peer benchmarking, or similar methods to understand what “good” 
cyber resilience looks like; 

e Determine which systems, applications, networks, technical components, and data are 
mission-critical, and focus on making those components resilient; 

e Develop and deploy or improve necessary program elements identified above; 

e Establish cyber resilience performance measures and targets and provide frequent progress 
updates; 

e Establish an agency-wide cyber resilience training program reinforced with the appropriate 
table-top, functional, and full-scale exercises. Industry experience highlights the absolute 
necessity of doing these exercises frequently; and 

e Determine who in your situation is in charge and what your agency’s role is in cyber resilience. 


Obviously, the programmatic and process recommendations presented in the previous sec- 
tion represent significant initiatives that will take years to establish and mature. Meanwhile, risks 
to the DOT continue to increase. What can a state DOT do now when it comes to improving 
its resiliency against cyber breaches or failures and how can a DOT sustain its operations and 
protect its cyber assets through major disruptions, regardless of cause? 


Table 2-7 is adapted from the 2006 National Infrastructure Protection Plan (NIPP) risk 
management framework, which calls on each infrastructure sector to identify those functions, 
assets, networks, systems, and people that make up the nation’s critical infrastructure and its key 
resources. This framework was further developed in the May 2007 CI/KR SSP for NIPP (DHS 
2007). This discussion focuses on the “Systems” row while recognizing the interdependencies 
between all of the rows. 


From the DOT’s perspective, this definition includes three distinct points of view of the 
system: planning (long-term), engineering (intermediate-term), and operations (short-term); 
three strategic levers: policy, people, and programs; with two different focuses: agency and 
infrastructure; and two different periods of research interest: pre-event (risk reduction) and 
post-event (consequence reduction). 


The starting point for any resilience planning is to assume that a cyber incident will occur 
and will degrade, disable, or destroy not only digital assets but parts of the transportation 
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Table 2-7. The 2006 NIPP infrastructure framework. 


FUNCTIONS The assignments, tasks, and positions in a state DOT that are 
critical to the performance of continued transportation service 


The infrastructure, equipment, resources, tools, vehicles, 
hardware, and facilities owned and operated by a state DOT 


ASSETS 


The relationships maintained by a state DOT with the private 
NETWORKS | sector and other branches of government that ensure continuity 
of transportation operations 


The critical technology and applications, including data, 
yAyi4 a used to operate the DOT and the infrastructure and 
enable reliable network communication 


PEOPLE The necessary personnel needed by a state DOT to ensure 
resilient transportation services 


infrastructure as well. The various options presented in Table 2-8 provide a menu of strategic 
choices that can deployed before, during, and after a catastrophic cyber failure. The details of 
these choices should be documented in various COOP/COG, incident response, emergency 
response, and other plans, as appropriate. 


Those DOTSs that rely on another state agency for its information technology and commu- 
nications services have a special duty of care to ensure that the unique needs and priorities of 
the transportation infrastructure are well understood and reflected in statewide and regional 
policies and plans. 


Although these types of resilience-enhancing actions apply to either cyber or physical infra- 
structures, transportation decision makers should not be lulled into thinking that these areas 
are the same. Cyber systems are different from physical systems in many important ways that 
need to be accounted for: 


e Systems design, security, and resilience require different skills than usually exist in a DOT. 
Relatively few persons with these skills are attracted to government employment. 


Table 2-8. Resilience-enhancing actions. 


Actions Definition 


Redundancy Reroute communications, data or controls by adding one or 
more parallel components or subsystems 


Backup Components Replace one or more components whose function is disrupted 


Substitution Switch a process from one input or component to another 


Redesign systems and components to reduce or eliminate 
XT teledi idm their vulnerabilities. Harden, replace or relocate critical system 
components 


Improvise during a disruptive event, perhaps by re- 
engineering processes in real time or making do with materials 
and assets at hand. This could mean returning to older manual 
processes 


Improvisation 


Give systems preferential access to critical or scarce 
Prioritization resources; focus on restoring cyber and communication 
infrastructures first 


Source: Moteff (2012) 
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e Although the risks—hazards, frequency (i.e., exposure), and consequences—to transporta- 
tion infrastructure are well known, cyber risks are poorly understood. 

e Cyber incident reporting over the past 5 years indicate, however, that incidents are becoming 
more frequent, systems are more vulnerable than previously thought, and the consequences 
of cyber failure are increasingly more expensive and disruptive. 


Engaging with Cyber Resilience 


The need for a more effective set of short-term and long-term cyber resilience strategies 
is increasingly obvious and urgent, but many political, institutional, scientific, and technical 
barriers still exist. Finding creative ways to overcome these barriers is a critical challenge for 
transportation leadership. 


The following discussion points were derived from common challenges that organizations 
encounter as they attempt to develop and introduce more formal cyber resilience manage- 
ment approaches. The questions listed are neither exhaustive nor representative of all agen- 
cies. Recommendations already exist for addressing some of these questions (see Appendix C); 
addressing other questions will require new research projects. 


¢ Do you know the current and projected cyber risks to your agency and the consequences of 
the loss of products and services for your system and its users? Do you know how these risks 
impact travel, safety, environmental quality, and economic activity at community, regional, 
statewide, or multistate levels? 

e Have you implemented formal asset management, performance management, supplier manage- 
ment, and risk management approaches in your agency? Are these functions coordinated with 
each other? Are they coordinated with your traditional long-range planning, eigen delivery, 
and operations functions? 

e Have you integrated resilience requirements in these management systems? Have you inte- 
grated cyber resilience requirements into these? 

¢ How will you resolve the conflicts between policies, procedures, and priorities of your agency 
and others such as statewide IT and emergency management? 

e Do you participate in community and statewide planning initiatives reflecting integrated 
incident response, disaster recovery, continuity of government, and continuity of operations, 
including mitigation priorities? 

e Critical success factors influencing cyber resilience performance include transparent commu- 
nication, collaborative and cooperative partnerships, and a reservoir of social capital built up 
between elected officials, agency leaders, key technology providers, and others. Do you know 
whom you can rely on ina crisis? Do you know who relies on you? 

e Are you supporting AASHTO, TRB, and ITE cyber resilience initiatives? Are you investing in 
resilience-focused education and training for your executive staff, your employees, and your 
business partners? 

¢ What will it take for you to personally own this issue? 


A Scenario: Test for Cyber Resilience Readiness 


The following scenario is fictional, but it is based on actual events. 
Time: Some December in the near future. 


Unbeknownst to the agency, a while ago some perpetrator sent a 4GB USB flash drive, 
nicely embossed with what appears to be the agency’s logo, to every employee of Fleetwarez, 
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Figure 2-12. Example ransomware pop-up screen. 


the agency’s fleet and fuel management software vendor. Appreciative of the “gift,” several 
unwitting employees immediately started using the flash drives on their work computers. 
Unfortunately (for the agency), the drives were infected with ransomware, a particularly nasty 
strain of malware. The ransomware infiltrated the Fleetwarez developer’s network and was 
subsequently downloaded to every DOT vehicle in your fleet during a regularly scheduled 
software update. 


Several days ago, on the eve of the largest snowstorm forecast in years, a disturbing message 
popped up on the in-vehicle display in all of the agency’s plows, roadside assistance trucks, and 
maintenance vehicles—none of which will start (Figure 2-12). 


‘The governor and the media have heard rumors, and both are pressuring the agency for a 
situation report. Meanwhile, the snow has begun to pile up. 


What do you do now? 


Seriously, what would you do? 


PART 3 
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Introduction 


The 2020-2025 Transportation System Research Roadmap presents the results of a 3-year 
effort to gather and prioritize critical resilience research needs gleaned from a diverse set of trans- 
portation policy makers, executives, professionals, and researchers. The roadmap supports a 
mechanism by which the transportation community can work towards a consensus concerning 
those projects that will significantly advance the understanding, policy, and practice of trans- 
portation resilience. 


As described in Part 1 of this report, more than 180 resilience research ideas were identified 
from a variety of sources including three national workshops, literature reviews of recently com- 
pleted resilience research, participation in multiple resilience-oriented meetings, and discus- 
sions with selected thought leaders from TRB, AASHTO, and NIST. The priority ratings used in 
the process were made by an equally diverse set of participants and reflect multiple perspectives 
of resilience research priorities. The research effort resulted in 26 recommended projects. 


The recommendations do not represent a fixed or final roadmap for research and change; 
rather, they are a tool meant to help shape the ongoing efforts as input to plot a forward course 
for FHWA, AASHTO, and TRB resilience-related initiatives. There are many possible ways 
to use this roadmap. Readers who want to go directly to the recommended 2020-2025 slate of 
projects will find core project material that can be used to prepare submissions to the annual 
NCHRP process. Alternatively, readers interested in gaining a deeper understanding about the 
family of ideas that were gathered will want to concentrate on the section titled “Analysis of 
Recommended Projects” and the downloadable workbook described in Appendix B. Readers 
who are interested in how the roadmap emerged, its development, and the breadth of effort 
taken in the research will want to focus on the sections titled “Introduction” and “Roadmap 
Approach.” Regardless of the exploration undertaken, the roadmap, its appendices, and the 
downloadable files that accompany NCHRP Research Report 975 provide readers with the most 
complete tools available to advance transportation security and resilience research on critical 
topics to the professionals working in the field. 


Despite the many public- and private-sector efforts that had been made to improve transpor- 
tation system resiliency over the previous decade, TRB’s 2013 report on Critical Issues in Trans- 
portation concluded that “[T]he performance of the transportation system is neither reliable 
nor resilient, yet transportation’s role in economic revival and in global economic competition 
has never been more important” (TRB Executive Committee 2013). More recently, the Critical 
Issues in Transportation 2019 report again recognized the significance of resilience and security, 
concluding the following: 


[R]ecent intense floods, superstorms, and hurricanes have disrupted the lives of millions and caused billions 
of dollars’ worth of damage. Combined with the vulnerability of transportation facilities to terrorism, these 
events have made public and private officials acutely aware of the need to identify community vulnerabilities 
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and plan for responses to natural and human-caused disasters, including near- and long-term climate 
change effects on sea-level rise, droughts, forest fires, and heatwaves. 


Transportation agencies working across all modes continue to grapple with the dawning realiza- 
tion that they cannot currently plan, build, or operate their respective infrastructures to achieve 
and maintain the degree of resilient service expected and demanded by society and its elected 
representatives. The many faces of resilience add complexity to the challenge (Figure 3-1). NCHRP 
Project 20-59(54) was founded to confront the dilemma inherent in the findings of the 2019 TRB 
report, which posed 14 critical questions (TRB Executive Committee 2018): 


a 


10. 
ll. 


How can strategies appropriate for each mode be developed to apply layers of security without exces- 
sively impeding the movements of passengers and goods? 


. What kinds of decision-making tools can best help transportation agencies make appropriate deci- 


sions regarding climate change and terrorism in a risk management framework? 


. How can risk management approaches be incorporated into transportation planning and decision 


making? 


. How can results from climate models be translated into changes in design standards for severe 


weather events? 


. Which policies, programs, research topics, and investments can and should be undertaken to adapt 


existing transportation facilities and systems to rising sea levels, stronger storm surges, more fre- 
quent flooding, and other powerful and damaging extremes of weather? 


. How can experiences of communities and states that are beginning to adapt and change be best 


evaluated and shared? 


. In light of the inability to be precise about the scale and timing of future impacts, how can funding 


policies, designs, and standards be modified to build in flexibility to allow for needed adaptation, 
including the rebuilding of more resilient infrastructure after infrastructure is damaged or destroyed? 


. What evidence would convince policy makers and the public of the need to incur the extra, near-term 


costs of adaptive management? 


. What are feasible strategies for defending or retreating from the high-risk areas and avoiding con- 


tinued investment in the most vulnerable ones? 

How can security forces most effectively mitigate the security risk from drones? 

What capabilities will public agencies need to verify whether cybersecurity is being managed 
effectively? 


Emergency ff 
Management # 


Community § 
Resilience 


Source: Fletcher and Ekern (2017) 


Figure 3-1. Faces of resilience. 


12. What are the best practices, how can they be shared, and what role should the public sector play in 
overseeing and enhancing cybersecurity? 

13. How can these vulnerabilities be overcome or managed effectively? 

14. What strategies are needed for better preparation, response, communication, and sheltering-in-place 
on a regional basis? 


The challenge associated with implementing strategies for transportation systems resiliency 
arises from the scope, scale, and complexity of the concept, and the many topics related to it. 
Resilience not only spans the breadth of traditional transportation functions such as planning, 
engineering, and operations across seven modal areas, but it also is a central issue within other 
interdependent critical infrastructure sectors such as communications, emergency services, 
energy, government services, and IT. 


A growing body of experience suggests that the places that have the most resilient trans- 
portation systems have included multiple perspectives and participants from a wide variety of 
agencies, organizations, and sectors. At the same time, all parties involved admit that resilience 
science and engineering are still in their early days; that is, the concepts, principles, terminology, 
roles, responsibilities, strategies, practices, and resources necessary to improve transportation 
systems resilience are still very much a work in progress. 


The U.S. DOT, FHWA, DHS, AASHTO, TRB, and other transportation leaders believe that 
a crucial step in this process is to engage senior leadership in defining, understanding, and 
articulating a 5-year research program establishing a long-range course to support the goals set 
for resilient local, state, national, and international transportation systems. The implicit under- 
standing behind this strategy is to strike a balance between encouraging the dynamic innovation 
arising from local initiatives while at the same time avoiding inefficient re-inventing the same 
wheel hundreds of times in hundreds of places. 


A primary objective of the roadmap is to draft a program of discovery, exploration, and imple- 
mentation to develop and deploy new knowledge and practices. This 5-year research roadmap is 
intended to focus the efforts of the transportation community in implementing a broad-based 
program addressing a resilient transportation system. 


Roadmap Approach 


Multiple roadmapping activities undertaken by FHWA, AASHTO, and TRB have amply 
demonstrated that charting the future is not a simple exercise that follows a single linear path, 
but is a series of successive approximations vectoring to a direction using multiple inputs from 
the professionals engaged in the journey. This resilience research roadmap initiative was no 
different. 


‘The effort to develop a first-generation roadmap began in 2016 and has followed a two-round, 
six-vector approach. Each round was designed to tap into a different audience engaged in the 
search for a resilient transportation system. These audiences included senior leaders, academics, 
and professionals representing governmental and commercial interests. The research effort also 
included input from communities that have not been traditionally recognized as transportation 
resilience partners. 


Research Needs Identification and Prioritization 


The first-round methodology for this effort was implemented in four steps and resulted in 
more than 150 research needs: 


1. Six stakeholder outreach, data collection, survey, and engagement techniques were used over 
2.5 years; 
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2. The accumulated research needs collected in Step 1 were analyzed and classified using four 
standard industry classification frameworks; 

3. A flash poll was conducted using the research panel, the new AASHTO Committee on 
Transportation Systems Security and Resilience (CTSSR), and selected professionals; and 

4. The computed community ratings were applied against several industry frameworks to 
identify the top needs as determined by multiple points of view. 


Step 1 describes the collection tools used. The research needs outreach, survey, and engage- 
ment activities included six primary sources of resilience research needs (Figure 3-2), which are 
discussed in the following sections. 


CRP Final Reports 


Between September 2001 and January 2019, 216 security, emergency management, infra- 
structure protection, and resilience-related planning and implementation projects were 
initiated through programs managed by TRB. Of these, 193 projects have been completed, 
totaling over $31 million worth of cooperative research. The final reports of these projects 
contain an accumulated wealth of information. Many reports include recommendations for 
further research. 


Focusing primarily on research completed within the last 5 years, the research team for 
NCHRP Project 20-59(54) extracted resilience-related research needs from the recommenda- 
tions for further research contained in the final reports of more than 24 CRP research projects 
associated with security, emergency management, and infrastructure protection. 


NCHRP Synthesis on DOT Resilience Activities 


NCHRP Synthesis 527: Resilience in Transportation Planning, Engineering, Management, 
Policy, and Administration, published in 2018, documented resilience efforts and how they are 
organized, understood, and implemented within transportation agencies’ core functions and 
services. This synthesis detailed specific motivations behind the policies that promote highway 
resilience; provided definitions of risk and resilience and the relationship between these two 
fields; and described how agencies are incorporating resilience practices through project devel- 
opment, policy, and design. The findings and conclusions sections of this synthesis proposed 
several critical research areas and needs. 


NCHRP Synthesis on Resilience 
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Figure 3-2. Sources of resilience research needs. 


Special Events 


The research team understood that resilience in transportation involves many constituencies 
other that state DOTs. Consequently, the team sought out and attended or participated in the 
following events where resilience research needs were generated: 


e ‘The State of Resilience: A Leadership Forum and Community Workshop, sponsored by the 
Resilient America Roundtable (June 2016), 

e AASHTO Resiliency Peer Exchange on Extreme Weather and Climate Impacts (November 
2017), 

e NIST Community Resilience Panel Meeting (October 2017), and 

e The 2018 Transportation Resilience Innovations Summit and Exchange (October 2018). 


Although the research team did not directly participate in the 2016 Leadership Forum, 
this activity brought together a diverse group of decision makers, experts, practitioners, and 
community stakeholders, including representatives from academia, government, the private 
sector, foundations, and nonprofit organizations, to consider the results of years of invest- 
ment, experimentation, and research in building resilience; take stock of these many initiatives 
and efforts; and share their experiences in building more resilient communities. Attending 
the proceedings and presentations provided the research team with a rich set of potential 
research topics. 


TRB Workshops 


‘The research team conducted two workshops: 


Understanding Transportation Resilience Intersection with Cybersecurity Workshop, held at 
the 96th annual meeting of the Transportation Research Board (January 2017), and 
2020-2025 Resilience Research Roadmap Workshop, held at the 97th annual meeting of the 
Transportation Research Board (January 2018). 


The two half-day workshops were attended by 160 professionals, who participated in the 
research topics identification exercises. The 2017 workshop focused on cyber resilience needs 
and the 2018 workshop was organized around resilience research in planning, design, opera- 
tions, and other resilience topics. 


Outreach and Engagement 


The research team participated in several national meetings to advance the roadmap out- 
reach process and to gather additional information from industry thought leaders concerning 
research needs, trends, and agency environments as they relate to understanding resilience and 
security in transportation. These engagement opportunities included: 


e AASHTO Special Committee on Transportation Security and Emergency Management 
(SCOTSEM) annual meetings held in 2016 and 2017; 

e AASHTO CTSSR meetings, held in 2018; 

e TRB Committee ABR10 Critical Infrastructure Protection activities, held in 2017 and 

2018; and 

The 96th, 97th, and 98th annual meetings of the Transportation Research Board held in 2017, 

2018, and 2019. 


In addition to these activities, the research team developed and distributed a Research Needs 
Form for submitting research needs and ideas in early 2017 (see Appendix A). An online version 
of the Research Needs Form also was developed. These mechanisms were promoted at every 
engagement opportunity in which the team participated. 


Introduction 


67 


68 Transportation System Resilience: Research Roadmap and White Papers 


2018 Transportation RISE 


The Transportation Resilience Innovations Summit and Exchange (RISE) conference was a 
gathering of transportation professionals and executives that provided an opportunity to share 
experiences and discuss future directions in resilience and move to institutionalize its concepts. 
RISE was designed to gather and share new ideas, exhibit tools, and present guidelines that will 
help DOTs deal with and implement resilience in their organizations. The research team col- 
lected additional research topics and ideas. 


Research Needs Rating and Prioritization 


The research team employed a modified Nominal Group Technique (mNGT) for the rating 
and prioritization of potential research topics. Broadly speaking, this technique consists of 
several steps: 


1. Research needs collection; 

2. Needs polling (i.e., voting) to winnow out unsupported ideas; 

3. Analysis of remaining ideas; 

4, Synthesis and consolidation of alternatives into candidate project concepts; 
5. Candidate project polling of alternatives; and 

6. Final ranking and prioritization of alternatives. 


Steps 1 and 2 were conducted as a part of developing the Pre-RISE Roadmap. The mNGT 
allowed the research team to quickly “prune” the universe of choices, synthesize the remaining 
needs, and set up the topic prioritization and selection process. 


Although originally designed for interactive small group participation, the technique was 
modified for use with large groups who would be contributing remotely. Additionally, the 
group(s) responsible for generating the alternatives were distinct from the group that did the 
ratings. Because both groups were judged to have the same level of domain knowledge, the loss 
of fidelity of the ideas was not deemed significant. 


Step 1 yielded an aggregated list that preserved the original needs language as submitted. The 
original language was preserved in an attempt to avoid introducing the research team’s recom- 
mendations at this stage. 


In Step 2, a simple 0-to-5 rating scale was developed, and raters were instructed to rate each 
need independently of the others. Because each rating should be made independently, indi- 
vidual ratings do not express or imply any relative preference or ranking, preserving the rating 
across all subsequent analysis. Raters were instructed to consider the following questions in 
determining their ratings: 


¢ Does the proposed topic represent a critical research need of interest to many states? 

e Does the problem support FHWA, AASHTO, and/or TRB strategic directions? 

e Is the problem researchable? 

e Is the contemplated research timely? 

e Will successful research produce well-defined, implementable results with significant benefits? 
Can a proposed project be designed that avoids undesirable duplication of other completed or 
ongoing research? Does information already exist that satisfies this research need? 

Is the proposed study appropriate for the NCHRP or should it be performed elsewhere? 


The poll was distributed to the NCHRP project panel and to AASHTO staff for distribu- 
tion to the 52 TSSR member states. In September 2018, the research team prepared an Interim 
Report displaying the first-round flash poll results for use in consolidating, categorizing, and 
winnowing ideas. This effort resulted in bringing forward 46 projects for consideration in the 
second round. 


In total, more than 180 specific needs were identified from nine source categories. This set of 
needs was then community rated and ranked to determine the top 125 high-interest research 
needs in 10 subject matter areas: emergency management, asset management, design for resil- 
ience, community resilience, cyber resilience, infrastructure interdependencies, performance 
measures, economics of resilience, human and social factors, and risk management. 


Candidate Project Definition and Ranking 


Pursuant to the revised NCHRP 20-59(54) work plan and following the October 2018 Interim 
Panel Meeting and the RISE conference, the research team synthesized 125 community-rated 
high-priority resilience research needs into 46 candidate project concepts and conducted 
another rating poll during December 2018. 


The December poll was distributed to more than 130 subject matter experts, who included the 
NCHRP project panel, the AASHTO CTSSR, the TRB Resilience Section (TRB AMR10), and 
additional volunteer community raters. 


The rating individuals were again asked to rate the candidate projects on a scale from 0 to 5 
considering the following questions: 


¢ Does the proposed project represent a critical research need of interest to many states? 

e Will successful research produce well-defined, implementable results with significant benefits? 

e Does the research advance more resilient activities, organizations, or systems? 

¢ Does the project support FHWA, AASHTO, and/or TRB strategic directions? 

e Is the problem researchable? 

¢ Is the contemplated research timely? 

e Cana proposed project be designed that avoids undesirable duplication of other completed or 
ongoing research? Does information already exist that satisfies this research need? 

e Is the proposed project appropriate for the NCHRP or should it be performed elsewhere? 


Poll responses were received from 34 individuals, representing a cross-section of transpor- 
tation organizations and affiliations (Tables 3-1 and 3-2). Because the respondents were self- 
selected, they do not represent a truly random sampling of all stakeholders and any extrapolated 


Table 3-1. Respondents by organization. 


Organization Count Percentage 
DOT 18 53% 
University 6 18% 
Industry 7 21% 
MPO 2 6% 
FHWA 1 3% 
Total 34 100% 


Table 3-2. Respondents by industry 
affiliation. 


Affiliation Count Percentage 


AASHTO CTSSR 15 44% 
TRB AMR Section 9 26% 
NCHRP 20-59 Panel 6 18% 
Community Raters 4 12% 
Total 100% 
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results need to be viewed with some caution. However, their ratings provide an indication of 
higher and lower topics of interest, particularly within the AASHTO community. 


Raters also were asked to use a rating scale of 0 to 5, representing research with the least value 
to the greatest value (Table 3-3). The overall mean rating for all project candidates was 3.01, 
and the median rating was 3.03, indicating a normal distribution of rating values. No candidate 
project received a mean rating greater than 4 or less than 2. Analyzing the responses from the 
18 DOTs only, the mean rating was 2.78. The 13 project candidates that the DOTs rated 3 or 


greater were also rated 3 or better overall. 


Many interpretations of these ratings are possible, and readers should bear in mind that 
the respondents represent about 25% of the total number of stakeholders polled; however, the 
research team believes that the rating results reflect the evolving nature of the topic. DOTs are 
still wrestling with the fundamental nature of resilience and how to accommodate it within their 


organizations. 


Table 3-3. Resilience research candidate projects. 


Item No. Title Rating | Rank 
Integrating Resilience into Transportation Project Development 3.91 ail 


12 CO-02 | Resiliency Knowledge Base 


2 Economic Benefits from Making Investments in Resilient Transportation Assets 3.15 2 
3 DR-04 | Design Guidance and Standards for Resilience 3.72 3 
4 AM-01 | Assessing and Managing the Vulnerability of Transportation Assets 3.71 4 
5 AM-03 | Incorporating Resilience in National Programs 3.68 5 
6 EM-05 | Streamlining the Damage Assessment Process 3.53 6 

7 AM-02_ | Funding Resilience Adaptation 3.48 7 i 
8 DR-01 Using Improved Hydrological Forecasting to Improve Transportation Resilience Low 8 
9 PM-01 | Resilience Performance Measures: A Quantitative Approach 3.36 9 
10 CR-02 Cyber Risk Transfer Strategies 3.30 10 
TL. I|-02 Transportation Infrastructure Interdependencies Risk Analysis and Modeling 3.24 11 
3.21 12 


es eae | eee 
13 EM-07 | Effective Practices in Extreme Weather Response 3.18 13 
14 I-01 Maintaining Resilience in a Multi-modal Transportation System 3.16 14 


15 HF-01 Building a Resilient Work Force in State DOTs 3.15 
16 AM-04_ | Assessing Resilience Frameworks 3.09 16 
17 PM-03 | Frameworks for Measuring Transportation Resilience 3.06 17 
18 CO-05 | Organizational Resiliency: Moving from Recovery to Retrenchment 3.06 7 
19 CR-04 Assessing the Resilience of GPS-based Applications in Transportation 3.03 19 
20 EM-02 | New Technologies for Comprehensive Debris Management 3.03 19 
| 21 | EM-10 Emergency Project Contracting Guidelines 3.03 19 
22 CR-05 Deploying the NIST Cybersecurity Framework in State DOTs 3.03 19 
23 EM-03 | Multi-Agency Emergency Preparedness 3.03 19 
24 RM-01 | A New Tool Assessing the Value of Resiliency Alternatives by State DOTs 3.03 19 
t 25 EM-08 | Emergency Management Training for Transportation Workers 3.00 25 | 


26 CO-03 Restoring Access: Post-disaster Transportation Equity 


27 DR-06 Post-Disaster Engineering Assessment 2.97 27 
28 CR-03 Securing the Cyber Supply Chain 2.88 28 
29 DR-07 Stormwater Management Techniques to Enhance Resilience 2.87 29 
30 cR-01 | Operations Technology Procurement Handbook and Peer Exchange 2.81 30 


Table 3-3. (Continued). 
Item | No. Title Rating | Rank | 
BL. | ER-O1 Improving Supply Chain Resilience 2.81 30 | 
32 Enterprise Risk Management in State Departments of Transportation 2.81 30 
33 Using the Internet of Things to Improve Transportation Resilience 2.78 33 
34 Using Enterprise Risk Management Approaches on Emergency Projects 2.78 33 
35 Social Media’s Role in Transportation Operations Resilience 2.75 35 
36 Risk Strategies and Transportation Resilience 2.74 36 
37 DOT Role in Improving EMS Response Time 2.70 37 | 
38 Building a National Understanding of the Language of Resilience 2.67 38 
39 Tunnel Operator Certification Program L 2.67 38 
40 DR-02 | Understanding Geotechnical Aspects of Resilience 2.59 40 
41 DR-03 | Approaches to Improving Tunnel Evacuation 41 
42 PM-02 | Building Resiliency through Redundancy 42 
43 HF-02 Generational Shifts: Workforce Shaping Resilience Beyond 2025 43 
44 EM-06 | Responding to Freight Rail Oil Incidents 
45 CO-04 | Resilience Research Program on Labor Trafficking 
46 ER-03 Multi-Objective Optimization of Pooled Resources 46 
Findings 
Key findings from the research team’s needs identification and prioritization approach are 
as follows: 
1. Participants in the needs identification, needs ranking, candidate project development, and 


projects ranking processes comprised a representative sample of research sponsors, research 
users, and researchers. 

Needs ratings and candidate projects ratings appeared unbiased and within expected distri- 
butions. Relatedly, the researchers did not detect any attempt to skew the results in favor of 
some predetermined outcome. 


. Top-ranked candidate projects encompassed a variety of DOT program areas. As such, these 


candidates could be used by several AASHTO committees for possible problem statement 
development, endorsement, and submission. 

Top-ranked candidate projects addressed multiple aspects of the program management process. 
Although the needs identification process failed to include many broad disruptors, the top- 
ranked candidate projects slate does include coverage of some of them, primarily related to 
climate change. 


. Although each top-ranked candidate project is assumed to incrementally advance resilience 


practices within DOTs and contribute to the overall resiliency of the transportation system, 
the researchers were unable to discover any strategic or synergistic effects of the list taken as 
a whole. 


. Similarly, given that each candidate project's objectives appear to be independent of each 


other, there is no apparent project precedence. In other words, no project depends on the 
successful completion of another; no pairs of projects are envisioned to run in parallel and 
share intermediate research results. 

Several of the top-ranked candidates are more suited to be synthesis projects. 

Although implementation products and activities could be incorporated into specific state- 
ments of work, only one of the top-ranked candidate projects has an implementation focus 
(EM-08 Emergency Management Training for Transportation Workers). 
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Analysis of Recommended Projects 


Table 3-4 presents the research team’s consensus compilation of the 26 Roadmap Projects 
recommended for the period 2020-2025. The final section in Part 3 presents the entire Roadmap 
detail for the recommended projects. 


Many interpretations of candidate ratings are possible, but the research team believes that this 
is a reflection of the evolving nature of resilience. DOTs are still wrestling with the fundamental 
nature of resilience and how to accommodate it within their organizations. One the one hand, 
there is clear evidence that AASHTO and TRB no longer equate resilience with emergency 
management activities or more narrowly with extreme weather operations. On the other hand, 
Table 3-4 illustrates the breadth of concepts that the community is currently including under 
the umbrella term of resilience. 


A balanced research, development, and deployment program contains a mixture of distinct 
overlapping and interacting thrusts or emphasis areas (see Table 3-5 and 3-6). Project opportu- 
nities dealing with changes to workflow, workforce, and community engagement are well rep- 
resented in the 25 top-ranked proposals, whereas more basic research and deployment projects 
(i.e., the programmatic “tails”) are less so. This distribution appears to reflect the industry’s 
desire to incorporate resilience into existing lines of business as opposed to envisioning a new 
mission with new structures as was done a generation ago with transportation security. 


If, as AASHTO’s adopted definition states, resilience is “[T]he ability to prepare and plan 
for, absorb, recover from, or more successfully adapt to adverse events,” and the evolving sense 
of the phrase adverse events is expanded to mean “disruptive forces,” then a set of transforma- 
tional influences on transportation exists that requires thoughtful attention. The two ideas can 
be distinguished by their end points. Adverse events generally come to an end when recovery 
operations can commence. Disruptive forces have no end point—they continue and may, in fact, 
worsen over time. With disruptive forces, recovery is not an option; the best that can be hoped 
for is continuous adaptation. 


Although the list may vary from state to state, the following disruptive forces are already 
changing the long-term status quo enjoyed by the industry (Table 3-7). 


The effects of these disruptive forces are already being felt in the transportation industry, and 
these disruptions are starting to manifest themselves. Contending with each of these disruptive 
forces will require a great deal of preparation, planning, absorbing, and adapting by transporta- 
tion researchers, organizations, and agencies throughout the United States. 


A quick perusal of the top-ranked candidate projects highlights that, with the exception of 
extreme weather events, most of these issues are not yet of interest or not tied to the idea of 
resilience within the DOTs. 


Table 3-4. Top-ranked resilience research projects. 


Analysis of Recommended Projects 


Item No. Title Rating | Rank 
1 DR-O5 Integrating Resilience into Transportation Project Development 3.91 | 1 
2 ER-O2 Economic Benefits from Making Investments in Resilient Transportation Assets | 
3 DR-04 | Design Guidance and Standards for Resilience | 
4 AM-01 | Assessing and Managing the Vulnerability of Transportation Assets 
5 AM-03 | Incorporating Resilience in National Programs 
6 EM-05 | Streamlining the Damage Assessment Process 
7 AM-02 | Funding and Financing Resilience Adaptation 
8 DR-01 | Using Improved Hydrological Forecasting to Improve Transportation Resilience 
9 PM-O1 | Resilience Performance Measures: A Quantitative Approach 

10 CR-02 Cyber Risk Transfer Strategies 

11 11-02 Transportation Infrastructure Interdependencies Risk Analysis and Modeling 

12 CO-02 | Resiliency Knowledge Base 

13 EM-07 | Effective Practices in Extreme Weather Response 

14 I|-O01 Maintaining Resilience in a Multi-modal Transportation System ~ ; 

15 HF-01 Building a Resilient Work Force in State DOTs 3.15 15 

16 AM-04 | Assessing Resilience Frameworks 3.09 16 

17 PM-03 | Frameworks for Measuring Transportation Resilience 3.06 17 

18 CO-05 | Organizational Resiliency: Moving from Recovery to Retrenchment 3.06 17 

19 CR-04 | Assessing the Resilience of GPS-based Applications in Transportation 


New Technologies for Comprehensive Debris Management 3.03 19 
EM-10 | Emergency Project Contracting Guidelines 3.03 19 
22 CR-05 | Deploying the NIST Cybersecurity Framework in State DOTs 
23 EM-03 | Multi-Agency Emergency Preparedness 


25 


EM-08 


A New Tool Assessing the Value of Resiliency Alternatives by State DOTs 


Emergency Management Training for Transportation Workers 


26 


CO-03 


Restoring Access: Post-disaster Transportation Equity 


Table 3-5. Top-ranked projects by subject. 


Subject Count Percentage 


a 


Emergency Management 


Asset Management 


Design for Resilience 


Community Resilience 


Cyber Resilience 


Infrastructure Interdependencies 


Resilience Performance Measures 


Economics of Resilience 


Human Factors 


PI PIRPININ] W]Wwl] wl] s 


Risk Management 


Total 


N 
fon) 
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Table 3-6. Top-ranked projects by topic. 


Topic Count Percentage 


Policy, Rules, Process, and Funding 31% 


Tools and Technical Systems 23% 


Institutional Focus 19% 


Community Engagement 19% 


Investing in Innovation 4% 


Widespread Deployment 4% 


Total 100% 


Table 3-7. Top-ranked projects addressing disruptive forces. 


Disruptive Force Count Percentage 
Anthropocene (climate change, sea level rise, extreme weather) 12 67% 
Megacities/Smart Cities 3 17% 
Disruptive Technology (e.g., the loT, Al, robotics, 5G) 2 11% 
Knowledge, Trust, Resource, and Resilience Inequities 1 6% 
Post-Carbon Society 0 0% 
Post-Ownership or Sharing Society 0 0% 
Total 18 100%* 


loT = The Internet of Things; Al = artificial intelligence; 5G = fifth generation. 
* Total percentage reflects rounding. 


Recommended Roadmap of 
2020-2025 Research Projects 


This section contains the 5-year roadmap of recommended research projects as developed 
by the research team in collaboration with the project panel and transportation community. 


The family of 26 projects represents a potential program investment ranging from $10,750,000- 
$16,750,000. 


In the first portion of this section, Table 3-8, Table 3-9, and Table 3-10 summarize the research 
project titles, ratings, and rankings, and provide necessary reference material. The tables are 
followed by individual project write-ups that provide the material necessary to develop a TRB 
NCHRP project proposal for consideration in that process. 


The material and format have been specifically prepared to be usable in and serve as a foun- 
dation for developing a specific application to the NCHRP or related process. 


Integrating Resilience into Transportation 
Project Development 


Background: A recent review of national policies found that while resilience policies are being 
established within transportation agencies, integrating resilience requirements into design prac- 
tice is not well understood or practiced uniformly. With the recent federal requirements for risk- 
based asset management plans, it is possible that many DOTs have yet to fully complete those 
requirements and are struggling to address capturing resilience within their management and 
project development approaches. 


Objectives: The purpose of this research is to: 


1. Identify and consolidate the mandates requiring resilience and asset programs, and 
2. Develop guidance to incorporate these mandates into AASHTO and national guidance, and 
other established procedures. 


Estimated Duration: 24 Months 
Estimated Budget: $500,000-$750,000 
Potential Funding Source: NCHRP 


Topics: Tools and Technical Systems 
Subject: Design for Resilience 
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Table 3-8. Top-ranked resilience research projects. 


Title Rating Rank | 

Integrating Resilience into Transportation Project Development 3.91 1 | 
2 ER-02 bsiaenanerinprantaiy Making Investments in Resilient 3.75 2 
3 DR-04 Design Guidance and Standards for Resilience 3.72 3 
4 AM-01 | Assessing and Managing the Vulnerability of Transportation Assets 3.71 4 
5 AM-03 | Incorporating Resilience in National Programs 3.68 5 
6 EM-05 | Streamlining the Damage Assessment Process 3.53 6 
7 Taeug Funding and Financing Resilience Adaptation 3.48 7 
8 DR-01 el Hydrological Forecasting to Improve Transportation 3.44 8 
9 PM-01 | Resilience Performance Measures: A Quantitative Approach 3.36 9 
10 ‘| CR-02 Cyber Risk Transfer Strategies 3.30 10 
11 | 1-02 Transportation Infrastructure Interdependencies Risk Analysis and 3.04 11 


Modeling 


Resiliency Knowledge Base 


13 EM-O7 | Effective Practices in Extreme Weather Response 3.18 13 
14 I-01 Maintaining Resilience in a Multi-modal Transportation System 3.16 14 
15 HF-01 Building a Resilient Work Force in State DOTs 3.15 15 
16 | AM-04 | Assessing Resilience Frameworks 3.09 16 
17 PM-03 | Frameworks for Measuring Transportation Resilience 3.06 17 
18 | CO-05 | Organizational Resiliency: Moving from Recovery to Retrenchment 3.06 17 
19 | CR-04_ | Assessing the Resilience of GPS-based Applications in Transportation 3.03 19 
20 EM-02 | New Technologies for Comprehensive Debris Management 3.03 19 
21 EM-10 | Emergency Project Contracting Guidelines 3.03 19 
22 | CR-O5 Deploying the NIST Cybersecurity Framework in State DOTs 3.03 19 
23 EM-03 | Multi-Agency Emergency Preparedness 3.03 19 
24 RM-01 | A New Tool Assessing the Value of Resiliency Alternatives by State DOTs + 3.03 L 19 
25 Emergency Management Training for Transportation Workers 3.00 25 
26 CO-03 | Restoring Access: Post-disaster Transportation Equity 3.00 25 
Table 3-9. Project subject prefix codes. Table 3-10. Project subject areas. 

AM Asset Management 

CR Cyber Resilience 

DR Design for Resilience 

ce Economics of Resilience 

EM Emergency Management Investing in Innovation 

HF Human and Social Factors 

II Infrastructure Interdependencies 

PM Performance Measures 

RM Risk Management 

co Community Resilience | 


Recommended Roadmap of 2020-2025 Research Projects 


Economic Benefits from Making Investments 
in Resilient Transportation Assets 


Background: News stories have identified the benefits of improved building codes in rela- 
tion to reduced impacts from Hurricane Irma, and identified how communications recovered 
quickly in most areas in Houston in the aftermath of Hurricane Harvey. However, few finan- 
cial and economic benefits from transportation investments that foster resilience have been 
documented. 


Objectives: The purpose of this research is to: 


1. Develop guidance, tools, and effective practices in identifying transportation sector resilience 
investments; and 
2. Identify benefits and costs and the return on investment of these investments. 


Estimated Duration: 15 Months 
Estimated Budget: $100,000-$250,000 
Potential Funding Source: NCHRP 


Topics: Policy, Rules, Process, and Funding 
Subject: Economics of Resilience 


Design Guidance and Standards for Resilience 


Background: Many current permit requirements, design standards, and guidance do not 
account for extreme weather and future temperatures, precipitation, or sea-level rise. Existing 
infrastructure and future designs need to account for these conditions to reduce repetitive 
damage. This research will identify state and federal regulations, design standards, and guidance 
that need revision to account for extreme weather and future climate change. 


Developing methods to protect existing and future infrastructure from extreme weather and 
future climate conditions while integrating a green infrastructure philosophy through design 
and permitting is an emerging and incomplete initiative in the resilience approach to roadway 
design. There are many locations around the country where state and local agencies have made 
incremental innovations in developing a resilient infrastructure for the future. 


Objectives: The purpose of this research is to: 


1. Identify federal and state regulations, design standards, and so forth, that need revision due 
to extreme weather, sea-level rise, and other effects of future climate change; 

2. Update current AASHTO transportation design standards; 

3. Define the next generation of design standards in a resilience environment; and 

4. Ensure that design standards incorporate future climate change impacts. 


Estimated Duration: 24 Months 
Estimated Budget: $ 750,000-—$1,000,000 
Potential Funding Source: NCHRP 


Topics: Policy, Rules, Process, and Funding 
Subject: Design for Resilience 


Assessing and Managing the Vulnerability 
of Transportation Assets 


Background: Extreme weather and natural disasters are becoming a new challenge to the 
transportation community. These vulnerabilities include extreme/prolonged heat; wild- 
fires; repeated flooding; and avalanche potentials. As transportation agencies acquire a better 
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understanding of how these extremes create short- and long-term impacts on their transporta- 
tion assets they are recognizing a need to develop, share, and align adaptation and mitigation 
strategies that will work. A useful tool set and effective practices would assist transportation 
leaders on this journey to resilience. 


Objectives: The purpose of this research is to: 


1. Identify current effective practices, 
2. Provide guidance on aligning adaptation and mitigation strategies, and 
3. Develop potential objective decision support systems. 


Estimated Duration: 15 Months 
Estimated Budget: $100,000-$250,000 
Potential Funding Source: NCHRP 


Topics: Tools and Technical Systems 
Subject: Asset Management 


Incorporating Resilience in National Programs 


Background: A recent review of national policies found that while resilience policies are 
becoming established, there lacks integration of resilience into practice within transportation. 
With the recent requirements for risk-based asset management plans, it is possible that many 
DOTs have yet to fully complete those requirements and are struggling to address capturing 
resilience within their management approach. 


Objectives: The purpose of this research is to: 


1. Identify and consolidate the mandates requiring resilience and asset programs, and 
2. Develop guidance to incorporate these mandates into AASHTO and national guidance and 
other established procedures. 


Estimated Duration: 18 Months 
Estimated Budget: $250,000-$500,000 
Potential Funding Source: NCHRP 


Topics: Policy, Rules, Process, and Funding 
Subject: Asset Management 


Streamlining the Damage Assessment Process 


Background: Cost-effective damage assessment technologies can assist state DOTs in deter- 
mining causes of damage and providing eligibility-related documentation for the FHWA Emer- 
gency Relief (ER) and FEMA Public Assistance (PA) programs. 


Objectives: The purpose of this research is to: 


1. Develop a cost model with easy-to-use interface for common damage assessment and road 
repair items and activities that is acceptable to both FHWA and FEMA; and 
2. Pilot this approach and interface in several FHWA and FEMA regions. 


Estimated Duration: 24 Months 
Estimated Budget: $750,000-$1,000,000 
Potential Funding Source: NCHRP 


Topics: Tools and Technical Systems 
Subject: Emergency Management 


Recommended Roadmap of 2020-2025 Research Projects 


Funding and Financing Resilience Adaptation 


Background: Transportation agencies are inundated with a continuing stream of federal, 
state, and local requirements that demand new or different approaches to incorporating them in 
their assets and programs. Many of these requirements can assist agencies in achieving a long- 
term resilience of their assets. However, meeting this challenge will require a different way of 
thinking about financing their investments. 


Objectives: The purpose of this research is to: 


1. Identify the challenges facing agencies in funding and financing climate-related issues in 
transportation projects, and 

2. Create tools and techniques to identify opportunities to classify funding in a way that helps 
agencies seize these opportunities. 


Estimated Duration: 21 Months 
Estimated Budget: $500,000-$750,000 
Potential Funding Source: NCHRP 


Topics: Policy, Rules, Process, and Funding 
Subject: Asset Management 


Using Improved Hydrological Forecasting 
to Improve Transportation Resilience 


Background: Highway and transit investments have long service lives, so finding ways to use 
predicted or forecast precipitation and flow is important, particularly as the location, frequency, 
and severity of storms are changing. A gap in research exists to identify scientifically defen- 
sible approaches to address non-stationary forecasting of precipitation and flow in a riverine 
environment. 


Objectives: The purpose of this research is to: 


1, Improve flooding models using risk and uncertainty principles to make better flooding fore- 
casts, and 


2. Develop methods to better assess impact on riverine flow and on transportation infrastructure. 


Estimated Duration: 18 Months 
Estimated Budget: $250,000-$500,000 
Potential Funding Source: NCHRP 


Topics: Tools and Technical Systems 
Subject: Design for Resilience 


Resilience Performance Measures: 
A Quantitative Approach 


Background: With the MAP-21 focus on performance measures, research is needed to identify 
and develop ways to evaluate resilience, security, infrastructure protection, and cybersecurity to 
provide effective performance measures for state DOTs to use. Given the lack of documented 
metrics for transportation resilience in the literature and the stated desire on how to measure 
and assess resilience, this dimension appears to be a pressing need. The relationship between 
long-term performance metrics (e.g., community health and safety, economic recovery, quality 
of life, environmental justice) and system resilience is not fully understood, so there needs to be 
easy-to-use guidance or modeling tools to assess resilience and reflect the relationship between 
mandatory performance metrics and resilience. Implementation will continue to be a challenge 
at state DOTs. 
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Objectives: The purpose of this research is to: 


1. Survey measures currently used; 

2. Evaluate their effectiveness; 

3. Address data needs, assessment methods, criticality assessment models, and asset vulner- 
ability; and 


4, Determine expected benefits from performance measures. 


Estimated Duration: 18 Months 
Estimated Budget: $250,000-$500,000 
Potential Funding Source: NCHRP 


Topics: Policy, Rules, Process, and Funding 
Subject: Performance Measures 


Cyber Risk Transfer Strategies 


Background: There is a lack of understanding of what a cyber resilient organization should 
look like and very little exchange of cyber resiliency effective practices and lessons learned. 
Roughly half of the DOTs have transferred IT responsibility to other state agencies or to the 
private sector; most, however, still retain Operations Technology (OT) oversight. 


Objectives: The purpose of this research is to: 


1. Address how to establish cyber resilience/cybersecurity programs without IT oversight 
authority or in-house IT resources; 

. Identify effective IT/OT cyber resilience/cybersecurity governance models; 

. Identify strategies for cybersecurity risk transfer, including insurance; 

. Support business continuity and IT disaster recovery; and 

. Identify additional elements of cyber resilience, including technology, process, organizational 
capacity, and governance. 
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Estimated Duration: 18 Months 
Estimated Budget: $250,000-$500,000 
Potential Funding Source: NCHRP 


Topics: Institutional Focus 
Subject: Cyber Resilience 


Transportation Infrastructure Interdependencies 
Risk Analysis and Modeling 


Background: As transportation infrastructure transcends several multi-modal individual 
infrastructure sectors, its scale and complexity ranges across local, regional, national, and inter- 
national linkages/interdependencies. The scale, complexity, and criticality of such systems create 
the need for resilience measures that can prevent cascading failures throughout the transporta- 
tion infrastructure. This can only be identified through detailed risk modeling to identify the 
weak and critical points that can control the overall system reliability, redundancy, robustness, 
and recoverability, and hence the overall system resilience. 


Objectives: The purpose of this research is to: 


1. Identify the different multi-modal system interdependencies; 
2. Identify and apply the resilience measures for these interdependencies; and 
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3. Create a risk management model for: 
a. Identification of system criticality and the quantification of the resilience variability 
measures applied to each critical node, and 
b. Quantification of the associated costs for resilience recovery. 


Estimated Duration: 21 Months 
Estimated Budget: $500,000-$750,000 
Potential Funding Source: NCHRP 


Topics: Institutional Focus 
Subject: Infrastructure Interdependencies 


Resiliency Knowledge Base 


Background: The National Institute of Standards and Technology (NIST) chartered a 
Community Resiliency Panel to help inform NIST’s work on community resiliency best prac- 
tices. The NIST CRP has standing committees in key areas. Transportation is one key area, 
because it is a lifeline during disruptive events in the community. An information gap exists 
that affects resilience efforts: national research products have not yet detailed the resources 
used by and the approach taken by each of the state DOTs to develop a resilience posture; 
state DOTs may not be knowledgeable of community resilience needs; and communities may 
not understand transportation systems beyond jurisdictional lines. There are hundreds of 
directly relevant materials on transportation sector resilience and community resilience that if 
assessed together could inform resilience efforts in communities that relate to transportation. 


Objectives: The purpose of this research is to: 


. Define a strategy for building a CRP Resiliency Knowledge Base, 

. Identify the topic areas of interest to a community, 

. Inventory and catalogue existing resiliency information products in the transportation sector, 
. Assess their suitability for the Resiliency Knowledge Base, and 

. Design an approach to sustaining this knowledge base. 
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Estimated Duration: 18 Months 
Estimated Budget: $250,000-$500,000 
Potential Funding Source: NCHRP 


Topics: Community Engagement 
Subject: Community Resilience 


Effective Practices in Extreme Weather Response 


Background: Many natural hazards need to be better understood in the world of emergency 
management. The vulnerabilities and risks associated with extreme weather and other driving 
hazards such as dust storms also need to be assessed at regional and local scales. 


Objectives: The purpose of this research is to: 


1. Increase state DOT technical expertise to complement and supplement federal weather fore- 
casting at the local, regional, and national levels. Identify technologies, training, and standards 
in Knowledge Management that can support informed decision making and coordination 
within state DOTs and with external partners, given the increased risk of extreme weather 
events; 


81 


82 Transportation System Resilience: Research Roadmap and White Papers 


2. Collect a common set of information from states that experienced the same extreme weather 
event to learn about similarities and differences before, during, and after the event as well as 
the lessons learned, identified by each state; 

3. Identify the extreme weather events projected to occur with more frequency or intensity in 
the future; 

4, Develop a framework for an organized response, and collect a standard set of information and 
materials on previous events of a similar nature; and 

5. Conduct research and synthesis of Emergency Management Assistance Compact (EMAC) 
case examples to surface effective practices in the transportation sector under extreme 
weather events. 


Estimated Duration: 21 Months 
Estimated Budget: $500,000-$750,000 
Potential Funding Source: NCHRP 


Topics: Widespread Deployment 
Subject: Emergency Management 


Maintaining Resilience in a Multi-modal 
Transportation System 


Background: The global transportation system is inherently multi-modal and increasingly 
seamless in nature. People, goods, and services easily transfer from one mode to another expecting 
the same degree of reliability and resilience across the entire trip. Unfortunately, all too often this 
is not the case. This project seeks to improve the understanding about the interdependencies 
between transportation modes and other critical infrastructure sectors such as communications, 
energy, and information technology, in both normal and emergency operations. This project 
approaches interdependent systems from a resilience context by defining and understanding the 
resilience ecosystem “system of systems” framework to quantify and address interconnected/ 
dependencies and risk/mitigation leading to resiliency. 


Objectives: The purpose of this research is to: 


1. Identify a framework to identify and assess interdependencies between transportation modes, 

2. Identify a framework to identify and assess interdependencies between critical infrastructure 
networks, and 

3. Define methods to identify critical points in multi-modal or multi-sector networks of critical 
physical infrastructure with respect to preventing cascading failures. 


Estimated Duration: 21 Months 
Estimated Budget: $500,000-$750,000 
Potential Funding Source: NCHRP 


Topics: Community Engagement 
Subject: Infrastructure Interdependencies 


Building a Resilient Workforce in State DOTs 


Background: The report A Ready and Resilient Workforce for the Department of Homeland 
Security: Protecting America’s Front Line offered workforce policy guidance for senior execu- 
tives on institutional and workforce resilience (Institute of Medicine 2013). This policy guidance 
emerged from an assessment of its mission readiness and resilience capacity. 
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Objectives: The purpose of this research is to: 


1. Develop and promote a unified strategy and common vision of workforce readiness and 
resilience, 

. Clarify and expand roles and responsibilities for workforce resilience, 

. Review and align responsibility and accountability for workforce resilience, 

. Propose an AASHTO sustainable leadership development program or focus on resilience, 

. Develop approaches to cultivate and sustain a culture of resilience, 

. Develop a measurement and evaluation strategy for workforce resilience in a state DOT, and 

. Develop a 5-year workforce resilience work plan for use by AASHTO. 
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Estimated Duration: 24 Months 
Estimated Budget: $750,000-$1,000,000 
Potential Funding Source: NCHRP 


Topics: Institutional Focus 
Subject: Human Factors 


Assessing Resilience Frameworks 


Background: Over the last several years a variety of agencies at federal, state, and local levels 
have created frameworks to characterize how to understand and incorporate resilience in their 
asset management programs. Likewise, a variety of association and research efforts have identi- 
fied international practices and frameworks in the same areas. At each conference and associa- 
tion event, the transportation practitioner and senior leader is inundated with the newest and 
latest framework for their use. 


Objectives: The purpose of this research is to: 


1. Collect and analyze these frameworks to identify what is common and different in each 
framework, and 

2. Develop tools and guidance for transportation agencies to use in selecting which framework 
would work best for their asset classes. 


Estimated Duration: 15 Months 
Estimated Budget: $100,000-$250,000 
Potential Funding Source: NCHRP 


Topics: Institutional Focus 
Subject: Asset Management 


Frameworks for Measuring Transportation Resilience 


Background: Literature reviews have identified shortcomings in the definition of resilience, 
the quantitative relationship between risk and resilience, and metrics to measure resilience. 
Much of the focus of resilience definitions is on the ability to recover post event; however, a 
recent DHS study helped to define key discriminators for resilience definitions to address the 
full range of time periods in which resilience is needed to be addressed by asset managers and 
owners and to reflect four goal areas (maintaining continuity of function; graceful degradation; 
recovery of function to desired function in designated time; inhibit basic state of change). 


Resilience metrics appear to be lacking in quantitative measures that can be readily calcu- 
lated and assessed. Much of the published peer-reviewed literature focuses on utilizing existing 
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operational metrics normally related to system reliability as surrogates to reflect recovery time 
as a measure of system resilience. 


Objectives: The purpose of this research is to: 


1. Assess various quantitative performance frameworks currently proposed; 

2. Develop examples demonstrating the usefulness of each to transportation operations, emer- 
gency, and risk managers; and 

3. Identify a framework to assess the impact of resilience alongside reductions in congestion, 
improved safety, and improved air quality and other national performance measures. 


Estimated Duration: 15 Months 
Estimated Budget: $100,000-$250,000 
Potential Funding Source: NCHRP 


Topics: Policy, Rules, Process, and Funding 
Subject: Performance Management 


Organizational Resiliency: Moving from Recovery 
to Retrenchment 


Background: As the frequency of recurring flooding and other road damage increases, deter- 
mining when or if it is ever appropriate for state and local departments of transportation to 
consider retrenchment and/or retreat (i.e. abandonment) of stretches of roads and highways is 
an increasingly meaningful topic. 


Objectives: The purpose of this research is to: 


1. Explore other alternatives besides the option to maintain, repave, or rebuild damaged roads 
and highways; 

2. Develop guidelines for what state DOTs need to know regarding the pros and cons of this; 

3. Survey states to learn which ones are dealing with chronically damaged facilities where loss of 
service has become part of the normal course of business. The survey will capture long-range 
predictions of their expectations of the amount of resources this will require over the next 
10 years, 20 years, and 40 years; 

4. Document effective retrenchment practices illustrating how state DOTs have dealt with those 
residences who are on roads that are flooded; and 

5. Examine the political, legislative, economic, and tactical aspects of this sensitive topic. 


Estimated Duration: 24 Months 
Estimated Budget: $750,000-$1,000,000 
Potential Funding Source: NCHRP 


Topics: Community Engagement 
Subject: Community Resilience 


Assessing the Resilience of GPS-based Applications 
in Transportation 


Background: GPS technology provides three essential services underpinning much of today’s 
digital economy. Positioning, navigation, and timing (PNT) applications are essential not only 
for routine transportation operations but are critical in post-event response and recovery 
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activities. The rapid introduction of PNT-dependent connected vehicles into the fleet is expo- 
nentially increasing this risk. However, this technology is vulnerable to disruption and error. 


Objectives: The purpose of this research is to: 


1. Document transportation vulnerabilities to GPS failure or degradation of signal, 
2. Discuss strategies to recover or work around GPS failure, and 
3, Present existing and potential replacement or alternative PNT approaches. 


Estimated Duration: 18 Months 
Estimated Budget: $250,000-$500,000 
Potential Funding Source: NCHRP 


Topics: Tools and Technical Systems 
Subject: Cyber Resilience 


New Technologies for Comprehensive 
Debris Management 


Background: Over the past decade, significant advances have been made in aerial imagery, 
remote sensing, and data management technologies. This project would create training and 
tools to help local and state debris managers take advantage of new technologies and applica- 
tions, including but not limited to load ticket tracking systems, debris volume modeling, remote 
volume assessments, and predictive cost estimating. As a field tool, it would be worthwhile 
to incorporate this information into a comprehensive Debris Management Planning Guide 
for State and Local Departments of Transportation. This Guide would build on the planning 
chapter of the Debris Management Handbook, going into explicit details about the plans and 
processes necessary for a successful and actionable debris management technology plan. 


Objectives: The purpose of this research is to: 


1. Develop a mobile field tool for debris management; and 
2. Demonstrate or pilot the tool on several platforms including iOS and Android phones, tablets, 
and other devices. 


Estimated Duration: 24 Months 
Estimated Budget: $750,000-$1,000,000 
Potential Funding Source: NCHRP 


Topics: Tools and Technical Systems 
Subject: Emergency Management 


Emergency Project Contracting Guidelines 


Background: A survey found that fewer than half of the responding DOTs had a document 
that provided specific guidance for expediting the procurement of emergency projects, and only _ 
five had a “contract document that was specifically developed for emergency projects.” 


Objectives: The purpose of this research is to: 


1. Define the appropriate content of DOT emergency project delivery plans, 
2. Define the form and content of tailored emergency contracts and their efficacy for agencies 
that have used them, 
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3. Identify the optimal content of emergency contracts, and 
4, Document the effectiveness of using this approach. 


Estimated Duration: 18 Months 
Estimated Budget: $500,000-$750,000 
Potential Funding Source: NCHRP 


Topics: Policy, Rules, Process, and Funding 
Subject: Emergency Management 


Deploying the NIST Cybersecurity Framework 
in State DOTs 


Background: The NIST Cybersecurity Framework consists of standards, guidelines, and best 
practices to manage cybersecurity-related risk. It provides a flexible and cost-effective approach 
that promotes the protection and resilience of critical cyber infrastructure and other sectors 
important to the economy and national security. The Framework elements are general in nature 
and not specific to the unique needs of state DOTs. 


Objectives: The objective of this research is to develop framework implementation/adoption 
guidance to DOT executives, program managers, and IT staff. 


Estimated Duration: 18 Months 
Estimated Budget: $500,000-$750,000 
Potential Funding Source: NCHRP 


Topics: Policy, Rules, Process, and Funding 
Subject: Cyber Resilience 


Multi-Agency Emergency Preparedness 


Background: Interagency emergency response coordination and communication have been 
and continue to be critical issues for many agencies at all levels of government. Multi-organization 
decision making is always a difficult stumbling block. This study will build on the benefits and 
lessons learned in the utilization of the Incident Command Center concepts and programs in 
urban and rural environments. 


Objectives: The objectives of this research are to: 
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. Develop guidance to shape emergency response approaches, identify responsibilities, and 
facilitate coordination between state DOTs and others; 
2. Provide recommendations for regular training and preparedness exercises; 
3. Develop tools and techniques to help DOTs to plan for and anticipate needs during weather- 
related disruption; and 
4. Consider challenges to agency operations and program development posed by climate 
change. 


Estimated Duration: 18 Months 
Estimated Budget: $500,000-$750,000 
Potential Funding Source: NCHRP 


Topics: Community Engagement 
Subject: Emergency Management 
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A New Tool Assessing the Value of Resiliency 
Alternatives by State DOTs 


Background: Most government risk management programs follow a vulnerability-focused, 
probabilistic model. These programs primarily consider only the downside aspects of risk, and 
lack the ability to explicitly consider potential upside opportunities. They also lack a common 
measure of value that is necessary to quantify and compare the impact of response alternatives 
and perform trade-off analyses over different time periods. Transportation decision makers 
need a better method to quantify the impacts of various transportation system resiliency invest- 
ment and response scenarios that supports consideration of the full distribution of possible 
social and economic outcomes and impacts using different time periods. 


Objectives: The objectives of this research are to: 


1. Develop a surface transportation resiliency value model to be used by transportation officials 
when assessing and selecting resiliency intervention strategies; 

. Calibrate the model using case studies; 

. Evaluate decision outcomes over different time horizons using this model; 

. Develop a prototype application incorporating the decision model; and 

. Pilot the application with one or more state DOTs. 
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Estimated Duration: 18 Months 
Estimated Budget: $500,000-$750,000 
Potential Funding Source: NCHRP 


Topics: Investing in Innovation 
Subject: Risk Management 


Emergency Management Training 
for Transportation Workers 


Background: Legislation and executive orders such as the Moving Ahead for Progress in 
the 21st Century Act (MAP-21) in 2012 and Presidential Policy Directive 21 on Critical Infra- 
structure Security and Resilience (PPD-21) in 2013 have changed the roles of state DOTs in 
emergency training and exercises. 


Emergency management training content should include general incident command system 
(ICS) and emergency support function (ESF) role awareness; accidents involving hazardous 
materials; response to flooding and storm damage; training on emergency operations plans; 
and training for field support personnel, including human resources, procurement, finance, and 
construction. Additional material should be developed on dealing with trauma and prepared- 
ness for out-of-area deployments. 


Objectives: The purpose of this research is to: 


1. Further define training needs, and 
2. Develop emergency management training content. Training courses are needed to: 

a. Present recent changes to federal requirements. 

b. Identify and train the human resources needed to carry out all-hazards resilience-focused 
emergency management, recognizing that it is difficult for most transportation agencies to 
allocate significant personnel, monetary, and material resources to planning and training 
for events that occur on infrequent bases or may not occur in their state or region. 

c. Establish correlations between (1) state and agency characteristics and emergency 
management training implementation problems, (2) preferred training/exercise methods 
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and state and agency characteristics, and (3) required training and exercises for district 
personnel, and whether there is a nuclear power plant within the district or in a nearby 
district; and 

d. Establish the appropriate content, format, and length for necessary emergency manage- 
ment refresher training. 


Estimated Duration: 21 Months 
Estimated Budget: $500,000-$750,000 
Potential Funding Source: NCHRP 


Topics: Institutional Focus 
Subject: Emergency Management 


Restoring Access: Post-disaster Transportation Equity 


Background: Resilience goals are being pursued at international, national, state, tribal, and 
local levels. In each arena, the term “resilience” has different dimensions that foster a lack of under- 
standing. There needs to be research to clarify for the transportation community what resilience 
means at a community level and what role DOTs can play in assisting the community. 


Objectives: The purpose of this research is to: 
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. Develop guidelines for achieving equity of resilience between differing sized communities 
with different resource availability; 
2. Address the non-infrastructure, non-economic components of the value of resilience such as 
social disruptions, sense of place, aesthetic values, and ecosystem services; and 
3. Explore technical approaches including multi-objective modeling to help deal with con- 
flicting interests in resilience. 


Estimated Duration: 15 Months 
Estimated Budget: $100,000-$250,000 
Potential Funding Source: NCHRP 


Topics: Community Engagement 
Subject: Community Resilience 
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APPENDIX A 


Transportation System Resilience 
Research Needs—Research Needs 
Submission Form* 


The research team invites interested parties to submit resilience research needs or problem statements in 
the following topical areas for inclusion in the road mapping process. Submissions may include resilience 
research programs, projects, plans, and other resilience initiatives encompassing the period 2020-2025. 


Working Title | 


Brief Description 


Scope/Objectives/Deliverables 


__ Cyber systems resilience (including risks such as space weather) 

__ Economics of resilience 

__Climate change/sea level rise/extreme weather risks 

__ Other human-caused or natural risks 

__Choke points/single points of failure 

__ Continuity of Operations/Continuity of Government considerations 
__Human and social factors 

__Information for decision-making 

__Automated/connected vehicles 

__ Workforce development 

__ Other 


Topical Area 


Possible Sponsor (FHWA, TSA, 
AASHTO, APTA, TRB, Private 
Sector, etc.) 


Estimated Cost and Duration 


Submitter Name 
Email/phone 


For more information 
Visit the NCHRP Project 20-59(54) web page for additional information: 
http://apps.trb.org/cmsfeed/TRBNetProjectDisplay.asp?ProjectID=4259 


* This appendix documents the form that was used during NCHRP Project 20-59(54). It is not intended to 
be used as an active form for new submissions. 


APPENDIX B 


Excerpts from Understanding 
Transportation Resilience: 
A 2016-2018 Roadmap 


The following pages reproduce excerpts from Understanding Transportation Resilience: 
A 2016-2018 Roadmap (Fletcher and Ekern 2017) that were provided as appendices with the dis- 
cussion papers that now make up Part 2 of this report. The excerpts provided useful context and 
continuity, linking the preceding work with the creation of the discussion papers. For readers’ 
convenience, the three appendices have been blended together into this document. Content 
that appeared in all three appendices has been merged into the first sections, followed by con- 
tent that appeared only in the appendix to the environmental discussion paper. Edits made to 
specific language as part of this consolidation are indicated either by brackets, where wording 
was adjusted, or by ellipses, where repeated content was moved or elided. 


Introduction 


[Key findings from] the 2015 National Infrastructure Advisory Council report on the critical 
importance of transportation sector resilience. Key in their findings and recommendations 
were: 

e The importance of understanding the systemic risks causing system disruptions 

e Incorporating resilience into operational practice 

e Investing in resilient infrastructure 

e The importance of conducting a quadrennial review of transportation infrastructure 

e Developing tools, models, and standards to mitigate risks 

e Operationalizing resilience 


Defining Resilience 


As is common in new fields of endeavor or in the adaptation of one field of knowledge to 
another domain, developing a common language with well-understood meaning is 
problematic. The language of resilience is no different. 


Originally the term and its application were developed in Human Psychology and referred to 
the human trait of being able to “bounce back” or recover from illness, adversity, depression, 
and other life misfortunes. 
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Other related ideas focus on the ability to adapt to the demands of stressful situations or to 
cope successfully with significant change, adversity, or difficulty. 


These core notions were easily seen as analogs of desirable characteristics of governments, 
communities, and complex systems such as transportation. Consequently, various agencies 
began to define resilience in multiple, similar but not completely harmonious terms. 


e Presidential Policy Directive PPD21 defined resilience as “The ability to prepare for and adapt to 
changing conditions and withstand and recover rapidly from disruptions. Resilience includes the 
ability to withstand and recover from deliberate attacks, accidents, or naturally occurring threats 
or incidents.” 


e DHS defines resilience variously as, “The ability to resist, absorb, recover from, or successfully adapt 
to adversity or a change in conditions,” and also, “The ability of systems, infrastructures, 
government, business, and citizenry to resist, absorb, recover from, or adapt to an adverse 
occurrence that may cause harm, destruction, or loss of national significance.” 


e The 2009 AASHTO-TRB Transportation Hazards & Security Summit proposed a comprehensive 
definition of Resilience: “The ability of a system to provide and maintain an acceptable level of 
service or functionality in the face of major shocks or disruptions to normal operations. 

o A system of systems characterization across “lifeline systems” including power, water, 
connectivity, and mobility with a focus on providing these essential services first. 
o Self-diagnosing, self-healing, and self-repairing systems that have fewer long-term service 


disruptions and lower life-cycle costs. 
o Systems that are sustainable, energy efficient and performance-based.” 


e AASHTO’s SCOTSEM defines resilience as “the ability to prepare and plan for, absorb, recover from, 
or more successfully adapt to adverse events” (adapted from DISASTER RESILIENCE: A NATIONAL 
IMPERATIVE, NATIONAL RESEARCH COUNCIL, 2012). 


e The National Academies of Sciences, Engineering, and Medicine’s Resilient America Roundtable has 
also adopted the National Imperative definition of resilience as, “the ability to prepare and plan for, 
absorb, recover from, or more successfully adapt to actual or potential adverse events.” 


e FHWA Order 5520 defines resilience or resiliency as, “... the ability to anticipate, prepare for and 
adapt to changing conditions and withstand, respond to and recover rapidly from disruptions.” 


e The Harbor Safety Committee Conference defined resilience as “The capability to expeditiously 
recover and reconstitute vital services with minimum disruption.” 


e The non-partisan, not-for-profit Reform Institute suggested resilience was “Mitigating the 
cascading adverse effects of a terrorist attack or natural disaster so that the nation can quickly 
recover and resume normal activity after such an episode.” 
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While a case can be made for standardizing on a single definition, the complexity of this 
undertaking coupled with the questionable benefits accompanying this ambition probably 
render such an activity moot. On the other hand, multiple applications of this ad hoc 
terminology may create the notion that “resilience” may be merely just the latest “buzz word” 
or initiative du jour. In other words, “Resilience is just (Emergency Management or System 
Operations or Infrastructure Protection or Transportation Security, etc.) with a new label.” 


The reality is that there is room and need for a “resilience” approach in all faces/scope and 
activities that are the responsibility of the transportation community. 


The Faces of Transportation System Resilience 
Resilience, much like safety, affects every major business function within a transportation 
agency, not just Operations. Planning, Design Engineering, Maintenance, and Business 


Management divisions all play significant roles. 


Table B-1 provides an example comparison among some of the more affected faces. 


Table B-1. Dimensioning the faces of resilience. 


Dimension Emergency Management 


Societal Change 
Plan, Resist, Adapt, Restore 


Mission Plan, Prepare, Respond, 
Recover 
Duration Hours - Months Years - Decades 


Resist, Adapt 


Decades or longer 


Climate, Community, and 


Potential Planned events New engineering 
Disruptions Incidents (incl. HAZMAT) requirements 
Weather events 
Natural disasters 
Terrorist incidents 
Catastrophic incidents 


Extreme weather impacts 
Climate change impacts 
Sea level rise 


Pandemics 


Carbon reduction initiatives 


resources, etc.) 


agenc 
Funding 
Planning 

Policies and Standards 
Mitigation Projects 


Agency Role As needed in the Varies but State DOTs 
jurisdiction; generally provide 
Support evacuation and engineering and 
emergency access activities; | construction services 
may be lead recovery 

agency for transportation 

repairs 


It is well recognized in the transportation operations and emergency response community that 
the framework for its activities is driven by an understanding that there is a continuum to the 
events for which they need to plan, prepare, respond, and recover from. 


Impact Local - Regional Local Superregional - Global 
Governance Varies but Public Safety Varies but State DOTs | Multiple agencies at all levels of 
(communication, Agencies (PSA) generally generally provide government, including 
coordination, provide Incident Command | Project Management international + Community 


groups +NGOs +private sector 
State DOT is not generally lead 
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The major take-away from this discussion is that, while state transportation agencies have 
significant roles to play in restoring transportation services and functions, in many cases they 
will not be the lead agency responsible and will need to closely coordinate, collaborate, and 
communicate with others. 


From the DOT's perspective, there are three distinct viewpoints: planning (climate change/ 
sustainability), engineering (infrastructure protection), and operations (traffic management/emergency 
management/security); three strategic levers: policy, people, and programs; with two different focuses: 
system and infrastructure component; and two different periods of research interest: pre-event (risk 
reduction) and post-event (consequence reduction). 


[The remaining pages reproduce content that appeared only in the appendix to the environmental 
discussion paper. Ellipses indicate where overlapping content was moved to merge it with the 
related content that appears in the first pages of this appendix. ] 


The transportation community is engaged in a 
conversation focused on characterizing a new 
challenge facing the nation’s transportation 
systems. In numerous venues, the nexus of 
preparing for the impacts of climate change while 
responding to the catalog of system 


“The transportation system is a 
complex network of 
infrastructure, vehicles, power 


vulnerabilities and emergencies has emerged to 
be characterized as the RESILIENCE! of the 
system. 


Although significant public and private sector 
efforts have been made to improve transportation 
system operations over the past decade, the 2013 
TRB Report on Critical Issues in Transportation 
concluded that “[T]he performance of the 
transportation system is neither reliable nor 
resilient, yet transportation’s role in economic 
revival and in global economic competition has 


sources, communications, and 
human capital. When we speak of 
resilience in the transportation 
sense, we mean the ability of the 
transportation system to recover 
and regain functionality after a 
major disruption or disaster.” 
AASHTO SCOR, 2016 


never been more important.” This finding was echoed by AASHTO’s Standing Committee on 
Research (SCOR) who noted that “A major performance issue across all modes is the 


1 The terms ‘resiliency’ and ‘resilience’ are synonymous and are used interchangeably in the text. 
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inadequacy of preparation for natural and human-made disasters” when it identified resilience 
as the number one NCHRP Emphasis Area for FY2017. 

... SCOR also noted that the application of resiliency engineering in the transportation sector is still in 
its infancy. This finding is echoed by the U.S. DOT, the National Research Council, AASHTO’s Special 
Committee on Transportation Security and Emergency Management (SCOTSEM), and others who 
have all indicated the need for more work to be done in implementing systematic resilience- 
based approaches in surface transportation. Although TRB cooperative research projects have 
produced a wealth of resilience-related studies, products, guidelines and effective practices, 
there is still much that remains to be done to ensure resilience becomes a sector wide goal co- 
equal with those established for safety, mobility, and efficiency. 


The Faces of Transportation System Resilience 
The parable of [the blind men and the oe . ae 
elephant] teaches that along with the local 

bias of experience, there is some truth to 
every position. Each cell of the 
“honeycomb” shown in Figure 1 represents 
some face of resilience but, is not, by itself 
the whole. For example, while emergency 
management is an essential component of 
resilience, its conceptual framework is ill- 
suited for the kinds of actions necessary to 
mitigate or adapt to slow disruptors such 
as climate change. Some disruptions are 
known well in advance and can be planned Nese s 
for in great detail; others occur with no 

warning and require a great deal of 
resourcefulness to restore _ service. 
Resilience, much like safety, affects every 
major business function within a 
transportation agency, not just Operations. 


Infrastructure ‘Climate 


Protection Change 


Planning, Design Engineering, 
Maintenance, and Business Management Figure B-1. The transportation resilience 
divisions all play significant roles. honeynond:, 


[Figure B-1 and Figure B-2] illustrate that continuum. 
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Federal 


State Emergency 


Management Agencies 


Other State and Local Agencies 
Emergency Management, Roads, Public Works) 


Level of Communication and Coordination 


STAs, States and Local Agencies 


Public Safety Agencies 
Planned Minor Major eee 
Activities Incident incident Incident. 


Weather-Related Incidents 


Figure B-2. Resilience continuums. 


The Roles of Security, Emergency Management, and Infrastructure 
Protection in Transportation Resilience 


Over the course of time there have emerged a set of eight strategies that are recognized as 
effective methods of improving the resilience of many areas of service delivery. 


These well-understood strategies employed by the emergency management and security 
communities may share a common thread across all faces of resilience. The eight strategies are 
defined in Table [2]. 


Number of Agencies Involved 
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Table B-2. Strategies to achieve resilience. 


STRATEGY 


Add Redundancy 


KEY DEFINITION 


Adding redundancies to the asset or system can improve resilience by 
being able to reroute production or process flows through one or more 
parallel components or subsystems. 


Backup Components 


Having back-up components available can also improve resilience 
by being able to quickly replace a component or asset whose function is 
disrupted. 


Substitution 


Substitution can improve resilience by allowing a process to switch from 
one input or component to another, perhaps with slightly different 
properties but without major impact on the final product or process. 


Reduce Vulnerabilities 


Products and processes can also be redesigned to reduce or 
eliminate their vulnerabilities to specific threats. 


Improvise Approaches 


Resilience may also depend on the ability to improvise during a 
disruptive event, perhaps by re-engineering processes in real time or 
making do with materials and assets at hand. 


Priority Access 


Model Disruptions 


Backup Logistics 


The resilience of a critical infrastructure asset could also be enhanced by 
giving it priority access to critical resources, thereby maintaining its 
services or getting services back on-line more quickly to aid in a more 
general community recovery. 


Many discussions regarding resilience of critical infrastructure stress the 
importance of modeling system operations, including the system’s 
interdependencies with other systems beyond the immediate control of 
operators, assessing vulnerabilities, and contingency planning. 


Planning (preparedness) is particularly important if one is using back- 
up systems or substitution to help respond to events. 
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APPENDIX C 


Roadmap Ratings and 
Rankings Workbook 


The Roadmap Ratings and Rankings Workbook is provided as a MS Excel worksheet and is 
available for download at no charge from the NCHRP Research Report 975 web page at www. 
trb.org. A file with presentation slides providing a brief summary of key information and talking 
points from the research also is available for download. 
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Abbreviations and acronyms used without definitions in TRB publications: 


A4A Airlines for America 

AAAE American Association of Airport Executives 

AASHO American Association of State Highway Officials 
AASHTO American Association of State Highway and Transportation Officials 
ACI-NA Airports Council International—North America 

ACRP Airport Cooperative Research Program 

ADA Americans with Disabilities Act 

APTA American Public Transportation Association 

ASCE American Society of Civil Engineers 

ASME American Society of Mechanical Engineers 

ASTM American Society for Testing and Materials 

ATA American Trucking Associations 

CTAA Community Transportation Association of America 
CTBSSP Commercial Truck and Bus Safety Synthesis Program 
DHS Department of Homeland Security 

DOE Department of Energy 

EPA Environmental Protection Agency 

FAA Federal Aviation Administration 

FAST Fixing Americas Surface Transportation Act (2015) 
FHWA Federal Highway Administration 

FMCSA Federal Motor Carrier Safety Administration 

FRA Federal Railroad Administration 

FTA Federal Transit Administration 

GHSA Governors Highway Safety Association 

HMCRP Hazardous Materials Cooperative Research Program 
IEEE Institute of Electrical and Electronics Engineers 

ISTEA Intermodal Surface Transportation Efficiency Act of 1991 
ITE Institute of Transportation Engineers 

MAP-21 Moving Ahead for Progress in the 21st Century Act (2012) 
NASA National Aeronautics and Space Administration 
NASAO National Association of State Aviation Officials 

NICEDD Natinnal Cannerative Freiaht Research Program 
NCHRP National Cooperative Highway Research Program 
NHTSA National Highway Traffic Safety Administration 

NTSB National Transportation Safety Board 

PHMSA Pipeline and Hazardous Materials Safety Administration 
RITA Research and Innovative Technology Administration 
SAE Society of Automotive Engineers 


SAFETEA-LU Safe, Accountable, Flexible, Efficient Transportation Equity Act: 
A Legacy for Users (2005) 


TCRP Transit Cooperative Research Program 

TDC Transit Development Corporation 

TEA-21 Transportation Equity Act for the 21st Century (1998) 
TRB Transportation Research Board 

TSA Transportation Security Administration 


US. DOT United States Department of Transportation 
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